diff --git a/spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequest.java b/spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequest.java
index f1c41b4789..9db53f4329 100644
--- a/spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequest.java
+++ b/spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequest.java
@@ -304,11 +304,11 @@ public final class EndpointRequest {
 				}
 				return "";
 			}).distinct().forEach((path) -> {
-				String pattern = path;
+				StringBuilder pattern = new StringBuilder(path);
 				for (String part : parts) {
-					pattern += part;
+					pattern.append(part);
 				}
-				matchers.add(new AntPathRequestMatcher(pattern));
+				matchers.add(new AntPathRequestMatcher(pattern.toString()));
 			});
 			return matchers;
 		}