CVE-2026-22752 — Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client…

CVE-2026-22752

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata PUBLISHED

Description (CNA)

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

Affected (CNA)

Vendor / product	Versions
Spring Security / Spring Authorization Server	affected 7.0.0 through 7.0.4; affected 1.5.0 through 1.5.6; affected 1.4.0 through 1.4.9; affected 1.3.0 through 1.3.10

CWE

No CWE identifiers supplied.

References

https://spring.io/security/cve-2026-22752

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.