Technology · VMware
VMware Spring AI vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 20 vulnerabilities in VMware Spring AI: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59319, was published on 27 August 2026. Nothing was published in the last eight weeks.
- Last 7 days
- 0
- Last 90 days
- 6
- Critical, all time
- 1
- Exploited in the wild
- 0
About VMware Spring AI
Spring AI is a Java framework for building applications with artificial intelligence capabilities.
Latest VMware Spring AI vulnerabilities
- CVE-2026-59319: Spring AI RedisChatMemoryRepository RediSearch injection in findByMetadata()mediumCVSS 4.3EPSS 0.3%
- CVE-2026-59294: Spring AI path traversal in ResourceCacheServicemediumCVSS 5.9EPSS 0.4%
- CVE-2026-47852: Spring AI insecure ONNX model cache directory creationhighCVSS 7.5EPSS 0.4%
- CVE-2026-59318: Spring AI tool calling privilege escalationmediumCVSS 6.5EPSS 0.3%
- CVE-2026-59308: Spring AI Semantic Cache context hash isolation bypassmediumCVSS 4.2EPSS 0.2%
- CVE-2026-59279: Spring AI unbounded session accumulation denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-47835: VMware Spring AI query injection in Vector StoreshighCVSS 8.6EPSS 0.4%
- CVE-2026-41863: VMware Spring AI path traversal in Anthropic Skills APImediumCVSS 6.5EPSS 0.4%
- CVE-2026-41713: VMware Spring AI prompt injection in conversation memoryhighCVSS 8.2EPSS 0.4%
- CVE-2026-41712: VMware Spring AI data exposure in chat memory componenthighCVSS 7.5EPSS 0.4%
- CVE-2026-41705: VMware Spring AI filter expression injection in MilvusVectorStorehighCVSS 8.6EPSS 0.4%
- CVE-2026-40980: Spring AI Vulnerable to OOM by attacker-controlled PDFmediumCVSS 6.5EPSS 0.2%
- CVE-2026-40979: Spring AI's ONNX model cache defaults to world-writable predictable /tmp directorymediumCVSS 6.1EPSS 0.1%
- CVE-2026-40978: SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…highCVSS 8.8EPSS 0.3%
- CVE-2026-40966: Spring AI improper access control in VectorStoreChatMemoryAdvisormediumCVSS 5.9EPSS 0.2%
- CVE-2026-40967: Spring AI has a VectorStore FilterExpression Converter injectionhighCVSS 8.6EPSS 0.4%
- CVE-2026-22744: VMware Spring AI injection in RedisFilterExpressionConverterhighCVSS 7.5EPSS 0.3%
- CVE-2026-22743: Spring AI has a Cypher Injection vulnerability in Neo4jVectorFilterExpressionConverterhighCVSS 7.5EPSS 0.3%
- CVE-2026-22742: Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLshighCVSS 8.6EPSS 0.4%
- CVE-2026-22738: VMware Spring AI SpEL injection in SimpleVectorStorecriticalCVSS 9.8EPSS 1.1%
Most severe VMware Spring AI vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-22738: VMware Spring AI SpEL injection in SimpleVectorStorecriticalCVSS 9.8EPSS 1.1%
- CVE-2026-40978: SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…highCVSS 8.8EPSS 0.3%
- CVE-2026-47835: VMware Spring AI query injection in Vector StoreshighCVSS 8.6EPSS 0.4%
- CVE-2026-41705: VMware Spring AI filter expression injection in MilvusVectorStorehighCVSS 8.6EPSS 0.4%
- CVE-2026-40967: Spring AI has a VectorStore FilterExpression Converter injectionhighCVSS 8.6EPSS 0.4%
- CVE-2026-22742: Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLshighCVSS 8.6EPSS 0.4%
- CVE-2026-41713: VMware Spring AI prompt injection in conversation memoryhighCVSS 8.2EPSS 0.4%
- CVE-2026-59279: Spring AI unbounded session accumulation denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-41712: VMware Spring AI data exposure in chat memory componenthighCVSS 7.5EPSS 0.4%
- CVE-2026-47852: Spring AI insecure ONNX model cache directory creationhighCVSS 7.5EPSS 0.4%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 3 | 0 | |
| 24 Aug 2026 | 3 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many VMware Spring AI vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/spring-ai)<a href="https://junglewise.ai/threats/technologies/spring-ai"><img src="https://junglewise.ai/threats/technologies/spring-ai/badge.svg" alt="VMware Spring AI vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/spring-ai.json, and this page as text at https://junglewise.ai/threats/technologies/spring-ai.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "VMware Spring AI vulnerabilities", https://junglewise.ai/threats/technologies/spring-ai, 9 November 2026.