CVE-2026-59291

Spring Cloud Function versions 4.2.0 to 5.0.3 are susceptible to an arbitrary file read and Server-Side Request Forgery (SSRF) vulnerability, which could allow attackers to access sensitive files or make unauthorized requests from the server. Although classified as low severity, organizations using these specific versions should prioritize remediation to mitigate potential exposure to sensitive data and unauthorized network interactions. Users of affected Spring Cloud Function releases should assess their environments for this vulnerability and apply necessary updates.