Spring Ai vulnerabilities

• spring ai, vmware spring ai +1 more RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure CVE-2026-59319 4.3 MediumAugust 27, 2026
• spring ai, vmware spring ai +1 more Arbitrary File Write via Path Traversal in ResourceCacheService CVE-2026-59294 5.9 MediumAugust 27, 2026
• spring ai, vmware spring ai +1 more Predictable cache directory location allows local ONNX model substitution in Spring AI CVE-2026-47852 7.5 HighAugust 26, 2026
• spring ai, vmware spring ai +1 more Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader CVE-2026-47851 7.5 HighAugust 26, 2026
• spring ai, vmware spring ai +1 more DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection CVE-2026-59318 6.5 MediumAugust 21, 2026
• spring ai, vmware spring ai +1 more Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation CVE-2026-59308 4.2 MediumAugust 21, 2026
• spring ai, vmware spring ai +1 more Unbounded persistent session allocation via repeated initialize requests CVE-2026-59279 7.5 HighAugust 21, 2026
• spring ai, vmware spring ai +1 more Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores CVE-2026-47835 Fix available 8.6 HighJune 15, 2026
• spring ai, vmware spring ai +1 more LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API CVE-2026-41863 Fix available 6.5 MediumMay 25, 2026
• spring ai, vmware spring ai +1 more Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs CVE-2026-41705 Fix available 8.6 HighMay 9, 2026
• spring ai, vmware spring ai +1 more Spring AI Vulnerable to OOM by attacker-controlled PDF CVE-2026-40980 Fix available 6.5 MediumApril 28, 2026
• spring ai, vmware spring ai +1 more Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory CVE-2026-40979 Fix available 6.1 MediumApril 28, 2026
• spring ai, vmware spring ai +1 more Spring AI has SQL Injection in CosmosDBVectorStore.doDelete() CVE-2026-40978 Fix available 8.8 HighApril 28, 2026
• spring ai, vmware spring ai +1 more Spring AI has a VectorStore FilterExpression Converter injection CVE-2026-40967 Fix available 8.6 HighApril 28, 2026
• spring ai, vmware spring ai +1 more Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters CVE-2026-22744 Fix available 7.5 HighMarch 27, 2026
• spring ai, vmware spring ai +1 more Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore CVE-2026-22743 Fix available 7.5 HighMarch 27, 2026
• spring ai, vmware spring ai +1 more Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching CVE-2026-22742 Fix available 8.6 HighMarch 27, 2026
• spring ai, vmware spring ai +1 more SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution CVE-2026-22738 Public exploitFix available 9.8 CriticalMarch 27, 2026