CVE-2026-47858 — live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Af…
Published: 2026-07-30 · CVSS: 8.0 · CVSS 3.1
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7