CVE-2026-47851: Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-26 · updated 2026-09-04
Weakness: CWE-674

Description

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9

Affected products

Spring AI: from 1.0.0 before 1.0.10; from 1.1.0 before 1.1.9; from 2.0.0 before 2.0.0.1 — fixed in 1.0.10, 1.1.9, 2.0.0.1
Spring AI: from 1.1.0 through 1.1.8; from 1.0.0 through 1.0.9; 2.0.0

How to fix

Upgrade to a fixed version: Spring AI 1.0.10, 1.1.9, 2.0.0.1. Check the vendor advisory for mitigations.

References

https://spring.io/security/cve-2026-47851

Get alerted when CVE-2026-47851 or the next vulnerability affects your stack