{"schemaVersion":3,"id":"CVE-2026-41001","aliases":["CGA-3gh8-fpw8-3j2p","CGA-3hwx-vhp6-vc22","CGA-f8pr-96jp-32w6","CGA-fm3j-vfmr-xxg9","CGA-g6wp-g498-ccwx","CGA-q5gm-66x9-gpg8","CGA-rm2p-5m79-ffw5","CGA-w6q2-vm8f-x7h8","CGA-2mf9-qhcv-hqv7","CGA-2pc8-5j98-3hc8","CGA-2w75-fv82-pwhc","CGA-4hxh-gghq-vx9j","CGA-6qf5-pph4-f3rq","CGA-8ccm-jp8p-4rcc","CGA-8mhf-p65r-xhx6","CGA-97pg-xhwg-fgvv","CGA-ccpm-9rhm-wrp3","CGA-hqv2-x9j2-9hq7","CGA-j3f6-8mmv-ch5w","CGA-prgh-45x7-22w9","GHSA-ggg2-9786-hwc8","CGA-xxcm-4285-39g2"],"status":"published","duplicateOf":null,"title":null,"description":"Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local attacker on the same host can pre-create this predictable directory or place a symlink before the application starts.\n\nAffected versions:\nSpring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16; 3.3.0 through 3.3.19; 2.7.0 through 2.7.33.","dates":{"published":"2026-06-11T05:04:28.663Z","modified":"2026-06-23T19:54:20.854Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":4.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":4.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":4.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00132,"percentile":0.02496,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.038,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00094},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00132,"percentile":0.02496}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00094,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00132,"percentile":0.02496}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-377","name":"Insecure Temporary File","description":"Creating and using insecure temporary files can leave application and system data vulnerable to attack.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/377.html"}],"affected":[{"vendor":"chainguard","product":"apache-nifi-registry-2.11","name":"apache-nifi-registry-2.11","label":"apache-nifi-registry-2.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry-2.11","purlType":"apk","versions":[{"text":"< 2.11.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6","name":"camunda-zeebe-8.6","label":"camunda-zeebe-8.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6","purlType":"apk","versions":[{"text":"< 8.6.39-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.39-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.2","name":"kayenta-2025.2","label":"kayenta-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.2","name":"kayenta-fips-2025.2","label":"kayenta-fips-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-config-cli","name":"keycloak-config-cli","label":"keycloak-config-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-config-cli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-config-cli-iamguarded-compat","name":"keycloak-config-cli-iamguarded-compat","label":"keycloak-config-cli-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-config-cli-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop","name":"ontop","label":"ontop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop-fips","name":"ontop-fips","label":"ontop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-config-cli","name":"keycloak-config-cli","label":"keycloak-config-cli","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-config-cli","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-config-cli-iamguarded-compat","name":"keycloak-config-cli-iamguarded-compat","label":"keycloak-config-cli-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-config-cli-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.springframework.boot","product":"spring-boot-autoconfigure","name":"org.springframework.boot:spring-boot-autoconfigure","label":"spring-boot-autoconfigure","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework.boot/spring-boot-autoconfigure","purlType":"maven","versions":[{"text":"≥ 4.0.0, < 4.0.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.5.0, < 3.5.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.4.0, ≤ 3.4.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.3.0, ≤ 3.3.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.7.0, ≤ 2.7.33","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.0.7 | ≥ 3.5.0, < 3.5.15 | ≥ 3.4.0, ≤ 3.4.16 | ≥ 3.3.0, ≤ 3.3.19 | ≥ 2.7.0, ≤ 2.7.33","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-boot","label":"Spring Boot","category":"framework"}},"hubHref":null},{"vendor":"spring","product":"spring boot","name":"Spring Boot","label":"spring boot","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.0.6.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.5.0, < 3.5.14.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.4.0, < 3.4.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.3.0, < 3.3.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.7.0, < 2.7.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.0.6.1 | ≥ 3.5.0, < 3.5.14.1 | ≥ 3.4.0, < 3.4.17 | ≥ 3.3.0, < 3.3.20 | ≥ 2.7.0, < 2.7.34","eol":null,"hubHref":"/vendor/spring/spring_boot"},{"vendor":"vmware","product":"spring_boot","name":"spring boot","label":"spring_boot","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.7.34","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.3.0, < 3.3.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.4.0, < 3.4.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.5.0, < 3.5.14.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.0.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.34 | ≥ 3.3.0, < 3.3.20 | ≥ 3.4.0, < 3.4.17 | ≥ 3.5.0, < 3.5.14.1 | ≥ 4.0.0, < 4.0.6.1","eol":null,"hubHref":"/vendor/vmware/spring_boot"}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://spring.io/security/cve-2026-41001","label":"spring.io/security/cve-2026-41001","hostname":"spring.io","tags":["WEB","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41001","label":"nvd.nist.gov/vuln/detail/CVE-2026-41001","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111","label":"github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-boot","label":"github.com/spring-projects/spring-boot","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-GFG3-JPMR-MJ6V"]},"timeline":[{"kind":"published","date":"2026-06-11T05:04:28.663Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-23T19:54:20.854Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T00:34:38.427Z","stale":false,"partial":false}}