High

Analysis Summary

CVE-2025-41232

VMware Tanzu Spring Security could allow a remote attacker to bypass security restrictions, caused by the failure to correctly locate method security annotations on private methods. An attacker could exploit this vulnerability to bypass authorization.

Impact

• Security Bypass

Indicators of Compromise

CVE

• CVE-2025-41232

Affected Vendors

Remediation

Upgrade to the latest version of Spring Security, available from the VMware Security Advisory.

VMware Security Advisory