CVE-2026-47841 Security Details

CVE ID

CVE-2026-47841

CWE

CWE-863

CVE Description

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18

Published

Aug 21, 2026

CVSS Score & Severity

9.1Critical

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.355%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/springframework/security/web/webauthn/management/Webauthn4JRelyingPartyOperations.authenticate(Lorg/springframework/security/web/webauthn/management/RelyingPartyAuthenticationRequest;)Lorg/springframework/security/web/webauthn/api/PublicKeyCredentialUserEntity;

JVMVulnerable params: 0

org/springframework/security/web/webauthn/management/Webauthn4JRelyingPartyOperations.convertParamToWebauthn4j(Lorg/springframework/security/web/webauthn/api/PublicKeyCredentialParameters;)Lcom/webauthn4j/data/PublicKeyCredentialParameters;

JVMVulnerable params: 0

org/springframework/security/web/webauthn/management/Webauthn4JRelyingPartyOperations.registerCredential(Lorg/springframework/security/web/webauthn/management/RelyingPartyRegistrationRequest;)Lorg/springframework/security/web/webauthn/api/CredentialRecord;

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

National Vulnerability Database

References

spring.ioPROJECT