What’s Vulnerable › Products

Spring AI vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.

Check whether your Spring AI version is affected

Latest Spring AI vulnerabilities

• CVE-2026-59319 — RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure (CVSS 4.3)
• CVE-2026-59294 — Arbitrary File Write via Path Traversal in ResourceCacheService (CVSS 6.5)
• CVE-2026-47852 — Predictable cache directory location allows local ONNX model substitution in Spring AI (CVSS 7.5)
• CVE-2026-47851 — Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader (CVSS 7.5)
• CVE-2026-59318 — DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection (CVSS 9.8)
• CVE-2026-59308 — Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation (CVSS 4.3)
• CVE-2026-59279 — Unbounded persistent session allocation via repeated initialize requests (CVSS 7.5)
• CVE-2026-47835 — Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores (CVSS 7.5)
• CVE-2026-41863 — LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API (CVSS 6.5)
• CVE-2026-41713 — Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor (CVSS 8.2)
• CVE-2026-41712 — ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage (CVSS 7.5)
• CVE-2026-41705 — (CVSS 8.6)
• CVE-2026-40980 — (CVSS 6.5)
• CVE-2026-40979 — (CVSS 6.1)
• CVE-2026-40978 — (CVSS 8.8)
• CVE-2026-40966 — VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration (CVSS 5.9)
• CVE-2026-40967 — (CVSS 8.6)
• CVE-2026-22744 — (CVSS 7.5)
• CVE-2026-22743 — Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore (CVSS 7.5)
• CVE-2026-22742 — Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching (CVSS 8.6)
• CVE-2026-22738 — SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution (CVSS 9.8)
• CVE-2026-22729 — CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter (CVSS 8.6)
• CVE-2026-22730 — CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter (CVSS 8.8)