{"schema_version":1,"title":"VMware Spring AI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in VMware Spring AI: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59319, was published on 27 August 2026.","url":"https://junglewise.ai/threats/technologies/spring-ai","json_url":"https://junglewise.ai/threats/technologies/spring-ai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/spring-ai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":8,"all_time":14,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":14},"latest":[{"cve":"CVE-2026-59319","cvss":4.3,"epss":0.003,"slug":"cve-2026-59319-spring-ai-redischatmemoryrepository-redisearch-injection-in","title":"Spring AI RedisChatMemoryRepository RediSearch injection in findByMetadata()","severity":"medium","exploited":false,"published_at":"2026-08-27T20:17:57.913+00:00","url":"https://junglewise.ai/threats/cve-2026-59319-spring-ai-redischatmemoryrepository-redisearch-injection-in"},{"cve":"CVE-2026-59294","cvss":5.9,"epss":0.0036,"slug":"cve-2026-59294-spring-ai-path-traversal-in-resourcecacheservice","title":"Spring AI path traversal in ResourceCacheService","severity":"medium","exploited":false,"published_at":"2026-08-27T20:17:55.583+00:00","url":"https://junglewise.ai/threats/cve-2026-59294-spring-ai-path-traversal-in-resourcecacheservice"},{"cve":"CVE-2026-47852","cvss":7.5,"epss":0.0035,"slug":"cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation","title":"Spring AI insecure ONNX model cache directory creation","severity":"high","exploited":false,"published_at":"2026-08-27T01:17:32.32+00:00","url":"https://junglewise.ai/threats/cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation"},{"cve":"CVE-2026-59318","cvss":6.5,"epss":0.0025,"slug":"cve-2026-59318-spring-ai-tool-calling-privilege-escalation","title":"Spring AI tool calling privilege escalation","severity":"medium","exploited":false,"published_at":"2026-08-21T12:16:30.39+00:00","url":"https://junglewise.ai/threats/cve-2026-59318-spring-ai-tool-calling-privilege-escalation"},{"cve":"CVE-2026-59308","cvss":4.2,"epss":0.0022,"slug":"cve-2026-59308-spring-ai-semantic-cache-context-hash-isolation-bypass","title":"Spring AI Semantic Cache context hash isolation bypass","severity":"medium","exploited":false,"published_at":"2026-08-21T12:16:30.27+00:00","url":"https://junglewise.ai/threats/cve-2026-59308-spring-ai-semantic-cache-context-hash-isolation-bypass"},{"cve":"CVE-2026-59279","cvss":7.5,"epss":0.0055,"slug":"cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service","title":"Spring AI unbounded session accumulation denial of service","severity":"high","exploited":false,"published_at":"2026-08-21T12:16:30.013+00:00","url":"https://junglewise.ai/threats/cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service"},{"cve":"CVE-2026-47835","cvss":8.6,"epss":0.0042,"slug":"cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores","title":"VMware Spring AI query injection in Vector Stores","severity":"high","exploited":false,"published_at":"2026-06-15T20:16:28.84+00:00","url":"https://junglewise.ai/threats/cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores"},{"cve":"CVE-2026-41863","cvss":6.5,"epss":0.0041,"slug":"cve-2026-41863-vmware-spring-ai-path-traversal-in-anthropic-skills-api","title":"VMware Spring AI path traversal in Anthropic Skills API","severity":"medium","exploited":false,"published_at":"2026-05-25T07:16:16.377+00:00","url":"https://junglewise.ai/threats/cve-2026-41863-vmware-spring-ai-path-traversal-in-anthropic-skills-api"},{"cve":"CVE-2026-41713","cvss":8.2,"epss":0.0035,"slug":"cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory","title":"VMware Spring AI prompt injection in conversation memory","severity":"high","exploited":false,"published_at":"2026-05-12T11:16:19.517+00:00","url":"https://junglewise.ai/threats/cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory"},{"cve":"CVE-2026-41712","cvss":7.5,"epss":0.0042,"slug":"cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component","title":"VMware Spring AI data exposure in chat memory component","severity":"high","exploited":false,"published_at":"2026-05-12T11:16:19.403+00:00","url":"https://junglewise.ai/threats/cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component"},{"cve":"CVE-2026-41705","cvss":8.6,"epss":0.0039,"slug":"cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore","title":"VMware Spring AI filter expression injection in MilvusVectorStore","severity":"high","exploited":false,"published_at":"2026-05-09T01:16:08.69+00:00","url":"https://junglewise.ai/threats/cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore"},{"cve":"CVE-2026-22744","cvss":7.5,"epss":0.0025,"slug":"cve-2026-22744-vmware-spring-ai-injection-in-redisfilterexpressionconverter","title":"VMware Spring AI injection in RedisFilterExpressionConverter","severity":"high","exploited":false,"published_at":"2026-03-27T06:16:38.12+00:00","url":"https://junglewise.ai/threats/cve-2026-22744-vmware-spring-ai-injection-in-redisfilterexpressionconverter"},{"cve":"CVE-2026-22742","cvss":8.6,"epss":0.0035,"slug":"cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side","title":"Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing","severity":"high","exploited":false,"published_at":"2026-03-27T06:16:37.833+00:00","url":"https://junglewise.ai/threats/cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side"},{"cve":"CVE-2026-22738","cvss":9.8,"epss":0.0109,"slug":"cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in","title":"In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A ma","severity":"critical","exploited":false,"published_at":"2026-03-27T06:16:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"VMware RabbitMQ","slug":"vmware-rabbitmq","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/vmware-rabbitmq"},{"name":"VMware Spring Framework","slug":"spring-framework","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/spring-framework"},{"name":"VMware Cloud Foundation","slug":"cloud-foundation","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/cloud-foundation"},{"name":"VMware Spring Security","slug":"spring-security","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/spring-security"},{"name":"VMware ESXi","slug":"esxi","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/esxi"},{"name":"VMware Spring Boot","slug":"spring-boot","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/spring-boot"},{"name":"VMware Avi Load Balancer","slug":"avi-load-balancer","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/avi-load-balancer"},{"name":"VMware Spring for GraphQL","slug":"spring-for-graphql","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/spring-for-graphql"},{"name":"VMware Spring Integration","slug":"spring-integration","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/spring-integration"},{"name":"VMware vSphere Foundation","slug":"vsphere-foundation","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/vsphere-foundation"},{"name":"VMware Spring Web Services","slug":"web-services","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/web-services"},{"name":"VMware Fusion","slug":"fusion","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/fusion"}],"technology":{"hub":true,"name":"VMware Spring AI","slug":"spring-ai","vendor":{"name":"VMware","slug":"vmware","url":"https://junglewise.ai/threats/vendors/vmware"},"aliases":[],"category":"library","homepage":"https://spring.io/projects/spring-ai","repo_url":"https://github.com/spring-projects/spring-ai","description":"An application framework that provides a unified interface for interacting with various AI models and services within the Spring ecosystem.","url":"https://junglewise.ai/threats/technologies/spring-ai"},"most_severe":[{"cve":"CVE-2026-22738","cvss":9.8,"epss":0.0109,"slug":"cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in","title":"In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A ma","severity":"critical","exploited":false,"published_at":"2026-03-27T06:16:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in"},{"cve":"CVE-2026-47835","cvss":8.6,"epss":0.0042,"slug":"cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores","title":"VMware Spring AI query injection in Vector Stores","severity":"high","exploited":false,"published_at":"2026-06-15T20:16:28.84+00:00","url":"https://junglewise.ai/threats/cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores"},{"cve":"CVE-2026-41705","cvss":8.6,"epss":0.0039,"slug":"cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore","title":"VMware Spring AI filter expression injection in MilvusVectorStore","severity":"high","exploited":false,"published_at":"2026-05-09T01:16:08.69+00:00","url":"https://junglewise.ai/threats/cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore"},{"cve":"CVE-2026-22742","cvss":8.6,"epss":0.0035,"slug":"cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side","title":"Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing","severity":"high","exploited":false,"published_at":"2026-03-27T06:16:37.833+00:00","url":"https://junglewise.ai/threats/cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side"},{"cve":"CVE-2026-41713","cvss":8.2,"epss":0.0035,"slug":"cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory","title":"VMware Spring AI prompt injection in conversation memory","severity":"high","exploited":false,"published_at":"2026-05-12T11:16:19.517+00:00","url":"https://junglewise.ai/threats/cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory"},{"cve":"CVE-2026-59279","cvss":7.5,"epss":0.0055,"slug":"cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service","title":"Spring AI unbounded session accumulation denial of service","severity":"high","exploited":false,"published_at":"2026-08-21T12:16:30.013+00:00","url":"https://junglewise.ai/threats/cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service"},{"cve":"CVE-2026-41712","cvss":7.5,"epss":0.0042,"slug":"cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component","title":"VMware Spring AI data exposure in chat memory component","severity":"high","exploited":false,"published_at":"2026-05-12T11:16:19.403+00:00","url":"https://junglewise.ai/threats/cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component"},{"cve":"CVE-2026-47852","cvss":7.5,"epss":0.0035,"slug":"cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation","title":"Spring AI insecure ONNX model cache directory creation","severity":"high","exploited":false,"published_at":"2026-08-27T01:17:32.32+00:00","url":"https://junglewise.ai/threats/cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation"},{"cve":"CVE-2026-22744","cvss":7.5,"epss":0.0025,"slug":"cve-2026-22744-vmware-spring-ai-injection-in-redisfilterexpressionconverter","title":"VMware Spring AI injection in RedisFilterExpressionConverter","severity":"high","exploited":false,"published_at":"2026-03-27T06:16:38.12+00:00","url":"https://junglewise.ai/threats/cve-2026-22744-vmware-spring-ai-injection-in-redisfilterexpressionconverter"},{"cve":"CVE-2026-41863","cvss":6.5,"epss":0.0041,"slug":"cve-2026-41863-vmware-spring-ai-path-traversal-in-anthropic-skills-api","title":"VMware Spring AI path traversal in Anthropic Skills API","severity":"medium","exploited":false,"published_at":"2026-05-25T07:16:16.377+00:00","url":"https://junglewise.ai/threats/cve-2026-41863-vmware-spring-ai-path-traversal-in-anthropic-skills-api"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}