CVE-2026-41003: Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters

June 10, 2026 (updated August 12, 2026)

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.

Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.

References

github.com/advisories/GHSA-3pjj-qpw6-5fcm
github.com/spring-projects/spring-security/releases/tag/6.5.11
github.com/spring-projects/spring-security/releases/tag/7.0.6
nvd.nist.gov/vuln/detail/CVE-2026-41003
spring.io/security/cve-2026-41003

Code Behaviors & Features

Detect and mitigate CVE-2026-41003 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →