What is the CVSS score of CVE-2026-22744?

CVE-2026-22744 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Java are affected by CVE-2026-22744?

Spring AI Redis vector store implementations (versions 1.0.0-1.0.4 and 1.1.0-1.1.3) contain an authentication bypass vulnerability that allows unauthenticated attackers to extract sensitive data…. A patch is available.

How to fix or mitigate CVE-2026-22744?

Within 24 hours: Identify all deployments of Spring AI with Redis vector store implementations and document affected versions (1.0.0-1.0.4, 1.1.0-1.1.3). Within 7 days: Implement network-level access controls restricting Redis vector store endpoints to trusted application servers only; monitor Redis query logs for suspicious TAG filter patterns. Within 30 days: Monitor vendor channels (Spring Security Advisories, GitHub releases) for patched versions; prepare upgrade plan to versions 1.0.5+ or 1.1.4+ immediately upon availability; test patched versions in non-production environment before production deployment.

Java CVE-2026-22744

EUVD-2026-16541 HIGH

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-03-27 vmware

GHSA-44f4-gvwj-6qg3

Java Redis Information Disclosure

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 16, 2026 - 20:37 vuln.today

cvss_changed

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 27, 2026 - 06:00 euvd

EUVD-2026-16541

Analysis Generated

Mar 27, 2026 - 06:00 vuln.today

CVE Published

Mar 27, 2026 - 05:38 nvd

HIGH 7.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 maven packages depend on org.springframework.ai:spring-ai-redis-store (1 direct, 1 indirect)

Ecosystem-wide dependent count for version 1.0.0-M5.

DescriptionCVE.org

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

AnalysisAI

Spring AI Redis vector store implementations expose sensitive data through unescaped TAG field filter injection in versions 1.0.0-1.0.4 and 1.1.0-1.1.3. Unauthenticated remote attackers can craft malicious filter expressions that bypass query boundaries in RediSearch TAG blocks, allowing extraction of unauthorized information from the vector database (CVSS 7.5 High, C:H). No public exploit identified at time of analysis, though the vulnerability is straightforward to exploit given its low attack complexity (AC:L).

Technical ContextAI

The vulnerability resides in RedisFilterExpressionConverter within spring-ai-redis-store, which provides vector storage capabilities for Spring AI applications using Redis as a backend. According to CPE data (cpe:2.3:a:spring:spring_ai), the affected product is Spring AI's Redis integration module. When processing filter expressions for TAG field queries, the stringValue() method constructs RediSearch query syntax by directly concatenating user input into @field:{VALUE} patterns without sanitizing metacharacters that have special meaning in RediSearch's TAG query language. This allows attackers to break out of the intended TAG block context and manipulate query logic, potentially accessing data from other tags or fields. The vulnerability represents an injection class flaw similar to SQL injection but targeting RediSearch's query syntax.

RemediationAI

Upgrade Spring AI to version 1.0.5 or later for the 1.0.x release line, or to version 1.1.4 or later for the 1.1.x release line, as documented in the vendor advisory at https://spring.io/security/cve-2026-22744. These patched versions implement proper escaping of special characters in RediSearch TAG filter expressions. Until upgrading is feasible, implement strict input validation and sanitization for all user-controlled values passed to Redis filter expressions, specifically blocking or escaping RediSearch metacharacters including braces, pipes, parentheses, and backslashes. Consider restricting vector store query capabilities to internal services only and avoid exposing filter construction to untrusted user input. Review application logs for anomalous TAG filter patterns that may indicate exploitation attempts targeting Redis query syntax.