EUVD-2026-25994
GHSA-qc4j-qjqx-vr58
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Lifecycle Timeline
9Blast Radius
ecosystem impact- 162 maven packages depend on org.springframework.ai:spring-ai-vector-store (35 direct, 127 indirect)
Ecosystem-wide dependent count for version 1.0.0.
DescriptionNVD
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query.
Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
AnalysisAI
Filter expression injection in Spring AI 1.0.0-1.0.5 and 1.1.0-1.1.4 allows remote unauthenticated attackers to manipulate vector store queries through unescaped keys and values in FilterExpressionConverter implementations. The vulnerability enables query language injection across multiple vector database backends, potentially exposing sensitive data (CVSS:C:H) and modifying query results (CVSS:I:L). …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all applications using Spring AI and identify those running versions 1.0.0-1.0.5 or 1.1.0-1.1.4. Within 7 days: Upgrade to Spring AI 1.0.6 or 1.1.5 (or later); prioritize production systems exposing filter parameters to end users. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today