MEDIUM 6.8 Maven
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
GHSA-2jrg-rf5x-568g · CVE-2026-22747
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.
This issue affects Spring Security: from 7.0.0 through 7.0.4.
Ready to move
Start Securing
Free, no credit card | First findings in minutes