high8.0
CVE-2026-47858
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote …
Impact
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Spring Tools | before 2.3.0 before 5.3.0 |