CVE-2026-22738criticalCWE-88

SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 1.1%

probabilidad de explotación

1.1%top 38% de las CVE

explotación observada

noninguna fuente lo reporta

In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Spring · Spring AI

Referencias

https://spring.io/security/cve-2026-22738