What is the CVSS score of CVE-2026-40978?

CVE-2026-40978 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Spring AI are affected by CVE-2026-40978?

Spring AI's CosmosDBVectorStore component contains a SQL injection vulnerability affecting versions 1.0.0-1.0.5 and 1.1.0-1.1.4 that allows authenticated users to execute arbitrary database queries,…. A patch is available.

How to fix or mitigate CVE-2026-40978?

Within 24 hours: Identify all deployed instances of Spring AI versions 1.0.0-1.0.5 and 1.1.0-1.1.4 in your environment and document their exposure level (production vs. non-production). Within 7 days: Upgrade all affected instances to Spring AI version 1.0.6 or 1.1.5 per VMware's advisory, beginning with production systems. Within 30 days: Conduct a security audit of vector store API access logs from the past 90 days to detect potential exploitation attempts, and review access controls to enforce least-privilege authentication to the vector store API.

Spring AI CVE-2026-40978

EUVD-2026-26011 HIGH

SQL Injection (CWE-89)

2026-04-28 security@vmware.com

GHSA-63c8-m9m2-cvr3

Java SQLi

8.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 29, 2026 - 18:16 nvd

Patch available

Re-analysis Queued

Apr 28, 2026 - 20:23 vuln.today

cvss_changed

Patch available

Apr 28, 2026 - 10:01 EUVD

Analysis Generated

Apr 28, 2026 - 09:30 vuln.today

EUVD ID Assigned

Apr 28, 2026 - 09:22 euvd

EUVD-2026-26011

Analysis Generated

Apr 28, 2026 - 09:22 vuln.today

CVE Published

Apr 28, 2026 - 09:16 nvd

HIGH 8.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 maven packages depend on org.springframework.ai:spring-ai-azure-cosmos-db-store (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 1.0.0.

DescriptionNVD

SQL injection vulnerability in Spring AI's CosmosDBVectorStore allows attackers to execute arbitrary SQL queries via crafted document IDs.

Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

AnalysisAI

SQL injection in Spring AI's CosmosDBVectorStore component (versions 1.0.0-1.0.5 and 1.1.0-1.1.4) enables authenticated remote attackers to execute arbitrary SQL queries through malicious document IDs, potentially achieving full database compromise including data exfiltration, modification, and denial of service. VMware has released patches in versions 1.0.6 and 1.1.5. …

RemediationAI

Within 24 hours: Identify all deployed instances of Spring AI versions 1.0.0-1.0.5 and 1.1.0-1.1.4 in your environment and document their exposure level (production vs. non-production). …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-40978 vulnerability details – vuln.today

Back

Spring AI CVE-2026-40978

CVSS VectorNVD

Lifecycle Timeline

Blast Radius

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code