CVE-2026-59327

{
  "id": "CVE-2026-59327",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-30T06:25:55.797",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the \"Spring Boot DevTools Client\" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the user marks the configuration as a shared file, directly into the project tree where it can be committed to version control. This secret is the sole credential protecting the DevTools remote restart/reload endpoint, which accepts and executes arbitrary class bytes on the target application. Anyone able to read the .launch file (via filesystem access, a workspace backup, or a shared VCS repository) can extract the secret and use it to achieve remote code execution against the associated Spring Boot application.\nAffected Spring Products and Versions:\nSpring Tools for Eclipse: 5.2.0 and earlier"
    },
    {
      "lang": "es",
      "value": "Spring Tools para Eclipse almacena el secreto remoto de Spring Boot DevTools (spring.devtools.remote.secret) como un atributo de cadena de texto plano en la configuración de lanzamiento ’Spring Boot DevTools Client’. Eclipse persiste los atributos de configuración de lanzamiento como XML en texto claro, ya sea en los metadatos del espacio de trabajo o, si el usuario marca la configuración como un archivo compartido, directamente en el árbol del proyecto donde puede ser enviado al control de versiones. Este secreto es la única credencial que protege el punto final remoto de reinicio/recarga de DevTools, que acepta y ejecuta bytes de clase arbitrarios en la aplicación objetivo. Cualquiera que pueda leer el archivo .launch (a través de acceso al sistema de archivos, una copia de seguridad del espacio de trabajo o un repositorio VCS compartido) puede extraer el secreto y usarlo para lograr ejecución remota de código contra la aplicación Spring Boot asociada.\nProductos y versiones de Spring afectados:\nSpring Tools para Eclipse: 5.2.0 y anteriores"
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Spring",
          "product": "Spring Tools for Eclipse",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "5.2.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-30T13:43:23.656304Z",
          "id": "CVE-2026-59327",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:spring_tools:*:*:*:*:*:eclipse:*:*",
              "versionEndExcluding": "5.3.0",
              "matchCriteriaId": "32B3B8F5-9BB0-496A-87C0-161B75ABE2F0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://spring.io/security/cve-2026-59327",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}