CVE-2026-22738criticalCWE-88

SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.1%

probabilidade de exploração

1.1%top 38% das CVEs

exploração observada

nãonenhuma fonte reporta

In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Spring · Spring AI

Referências

https://spring.io/security/cve-2026-22738