CVE-2026-59279CWE-770denial-of-service

CVE-2026-59279

High · published August 21, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients.

Affected versions:

Spring AI: 2.0.0

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00549 · 45.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-08-21T16:16Z
Affected products (1)
ProductVersionsFixed in
vmware/spring_ai≥ 2.0.0, < 2.0.12.0.1
References (1)
https://spring.io/security/cve-2026-59279 · [email protected]
EPSS history
Timeline
  • 21 AUG 12:07Z
    Unbounded persistent session allocation via repeated initialize requests
    cvelistv5