CVE-2026-2817 — Spring Data Geode Insecure Temporary Directory Usage
Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a loca…
Published: 2026-02-19 · CVSS: 4.8 · CVSS 4.0
Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7