CVE-2026-59279
Unbounded persistent session allocation via repeated initialize requests
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients. Affected versions: Spring AI: 2.0.0
| CWE | CWE-770 |
| Vendor | spring |
| Product | spring ai |
| Ecosystems | |
| Industries | TechnologyEnterprise |
| Published | Aug 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for spring spring ai
Be the first to know when new high vulnerabilities affecting spring spring ai are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Spring / Spring AI
2.0.0