CVE-2026-59279

Published Aug 21, 2026

Last updated 3 days ago

CVSS high 7.5

Overview

Description
The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients. Affected versions: Spring AI: 2.0.0
Source
security@vmware.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity
HIGH

Weaknesses

security@vmware.com
CWE-770

Social media

Hype score
Not currently trending

  1. CVE-2026-77776 (CVSS 9.1): Headroom's LLM proxy (https://t.co/1Ym4mwuRlD) treats x-headroom-user-id as memory owner — no bind. Name another user's id → read/write stored LLM memory. Fixed in 0.36.1. CVE-2026-59279 + CVE-2026-64849 — no bind / no cap / no IP pin. #CVE #Pytho

    @Innora_sg

    21 Aug 2026

    25 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.