CVE-2026-22750: Spring Cloud Gateway SSL Configuration Bypass Vulnerability
Summary
CVE-2026-22750: Spring Cloud Gateway's SSL bundle configuration silently bypassed. Affects org.springframework.cloud:spring-cloud-gateway versions < 4.2.1. Fixed in 4.2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Spring Cloud Gateway is a library that provides a simple, effective way to route to APIs and provides an excellent alternative to the Spring MVC framework. It is designed to provide a simple way to route requests and offers features such as load balancing, security, and monitoring. However, a recent vulnerability has been identified in version 4.2.x, where SSL bundle configurations are ignored, leading to potential security risks.
Vulnerability Detail
The vulnerability arises from the misconfiguration of SSL bundles in Spring Cloud Gateway. When users attempt to configure SSL using the property 'spring.ssl.bundle', the configuration is silently ignored, and the default SSL settings are applied instead. This can lead to insecure connections and expose sensitive data, as the intended SSL security measures are not enforced. The issue is particularly concerning for applications that rely on secure communications, as it could allow for man-in-the-middle attacks or data interception.
How To Fix
Latest published version: 5.1.0-RC1 as of 23 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.2.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually verify their SSL configurations and ensure that they are correctly set in their application. However, this is not a long-term solution, and upgrading to a patched version is strongly recommended.
Conclusion
The CVE-2026-22750 vulnerability in Spring Cloud Gateway poses a significant risk due to the silent bypass of SSL bundle configurations. Users are strongly advised to upgrade to a patched version to ensure secure communication and protect sensitive data.
See every vulnerability recorded for org.springframework.cloud:spring-cloud-gateway →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
The vulnerability affects versions in the 4.2.x branch, specifically those prior to 4.2.1.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application against this vulnerability using the Vulert playground without any signup.
If an immediate upgrade is not possible, ensure that your SSL configurations are correctly set and consider implementing additional security measures to mitigate risks.
The 4.2.x branch is no longer under open-source support, so upgrading to a newer version is essential for continued security updates.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.springframework.cloud:spring-cloud-gateway.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
