CVE-2026-2817 – Spring Data Geode Insecure Temporary Directory Usage

CVE ID : CVE-2026-2817

Published : Feb. 19, 2026, 6:25 p.m. | 35 minutes ago

Description : Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…