Time-of-check Time-of-use (TOCTOU) Race Condition in Spring Cloud Config - CVE-2026-47836
Published: August 28, 2026
Vulnerability identifier: #VU146231
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-47836
CWE-ID: CWE-367
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to disclose sensitive information and modify data.
The vulnerability exists due to a time-of-check time-of-use race condition in the SVN base directory handling of Spring Cloud Config Server when cloning SVN repositories to the configured base directory. A local privileged user can manipulate the base directory during repository operations to disclose sensitive information and modify data.
This issue affects deployments that use SVN as the backend repository.
Affected software
Spring Cloud Config
How to mitigate CVE-2026-47836
Install security update from vendor's website.
Spring Cloud Config - addressed in versions 3.1.15, 4.2.9, 4.3.5, 5.0.5