Spring Vulnerabilities Open Door to Arbitrary File Access and GCP Secret Leaks

Gbhackers •Divya • May 7, 2026

Security researchers have identified four new vulnerabilities in the Spring Cloud Config Server, ranging from medium to critical severity. These newly disclosed flaws could allow attackers to access arbitrary files, leak Google Cloud Platform (GCP) secrets, and manipulate system directories. Administrators, please patch your systems immediately to prevent active exploitation. Spring Vulnerabilities Critical Directory Traversal […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Spring Cloud Config Vulnerabilities Enable File Access and Secret Leaks The Spring development team disclosed four vulnerabilities in the Spring Cloud Config Server, with severity ratings from medium to critical. These vulnerabilities allow unauthorized access to arbitrary files and the potential leakage of Google Cloud Platform (GCP) secrets. Attackers could exploit these flaws to manipulate system directories and access sensitive information. Administrators are urged to patch their systems immediately to mitigate the risk of exploitation. The vulnerabilities affect environments relying on centralized configuration servers, which are critical for managing distributed systems. The specific CVEs have not been disclosed yet, but the urgency for remediation is emphasized across multiple sources. Security teams should prioritize applying updates to prevent potential breaches. 2 sources 68

Extracted Entities

Spring Vulnerabilities Open Door to Arbitrary File Access and GCP Secret Leaks

The full story

Extracted Entities

Companies (1)

CWE Weaknesses (2)

Platforms (1)

Vulnerabilities (1)