GitStock

spring-projects/spring-ai · Security

Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key

GHSA ID
GHSA-fvh3-672c-7p6c
CVE ID
CVE-2026-22738
Severity
critical
Published
Updated
CVSS
9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3
9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected.

This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

CWEs

  • CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
  • CWE-94 · Improper Control of Generation of Code ('Code Injection')
  • CWE-917 · Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

References

Open GitHub