A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts.
Spring Integration 7.1.0
Spring Integration 7.0.0 – 7.0.5
Spring Integration 6.5.0 – 6.5.10
Spring Integration 6.4.0 – 6.4.12
MEDIUM
Vulnerability intelligence
CVE-2026-59311
CVSS 3.16.8
SeverityMedium
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database