CVE-2026-2817 - Spring Data Geode Insecure Temporary Directory Usage

CVE ID : CVE-2026-2817 Published : Feb. 19, 2026, 6:25 p.m. | 14 minutes ago Description : Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...