Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-40977

33
FAUCET Score

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is started. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); PID file / symlink behavior (`ApplicationPidFileWriter`). Versions that are no longer supported are also affected per vendor advisory.

First published: Apr 27, 2026Last modified: Apr 28, 2026

Impacted Technologies

VendorProductVersion(s)CPE
< 2.7.33CPE matchmatch criteria
cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*
>= 3.3.0, < 3.3.19CPE matchmatch criteria
cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*
>= 3.4.0, < 3.4.16CPE matchmatch criteria
cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*
>= 3.5.0, < 3.5.14CPE matchmatch criteria
cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*
>= 4.0.0, < 4.0.6CPE matchmatch criteria
cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
Exploitability Score
0.5
Impact Score
4.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.11%
Probability of exploitation in next 30 days
EPSS Percentile
1.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0011 is in the 22nd percentile among its peer group of 3,720 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

mavenpatch availablevia ghsa
Product: org.springframework.boot:spring-boot-cassandraFixed in: 4.0.6
mavenpatch availablevia ghsa
Product: org.springframework.boot:spring-boot-cassandraFixed in: 3.5.14

Vendor Advisories (1)

mavenGHSA-5368-6h4h-gr29medium

Spring Boot's PID file write follows symlinks at predictable default path

Apr 28, 2026

References

spring.io / security/cve-2026-40977
Vendor Advisory