# VMware Spring AI vulnerabilities

Source: https://junglewise.ai/threats/technologies/spring-ai  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/spring-ai.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 20 vulnerabilities in VMware Spring AI: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59319, was published on 27 August 2026. Nothing was published in the last eight weeks.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 6
- All time: 20 (1 critical, 0 exploited in the wild)

## About VMware Spring AI

Spring AI is a Java framework for building applications with artificial intelligence capabilities.

## Latest VMware Spring AI vulnerabilities

- [CVE-2026-59319: Spring AI RedisChatMemoryRepository RediSearch injection in findByMetadata()](https://junglewise.ai/threats/cve-2026-59319-spring-ai-redischatmemoryrepository-redisearch-injection-in) (medium, CVSS 4.3, published 27 Aug 2026)
- [CVE-2026-59294: Spring AI path traversal in ResourceCacheService](https://junglewise.ai/threats/cve-2026-59294-spring-ai-path-traversal-in-resourcecacheservice) (medium, CVSS 5.9, published 27 Aug 2026)
- [CVE-2026-47852: Spring AI insecure ONNX model cache directory creation](https://junglewise.ai/threats/cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation) (high, CVSS 7.5, published 27 Aug 2026)
- [CVE-2026-59318: Spring AI tool calling privilege escalation](https://junglewise.ai/threats/cve-2026-59318-spring-ai-tool-calling-privilege-escalation) (medium, CVSS 6.5, published 21 Aug 2026)
- [CVE-2026-59308: Spring AI Semantic Cache context hash isolation bypass](https://junglewise.ai/threats/cve-2026-59308-spring-ai-semantic-cache-context-hash-isolation-bypass) (medium, CVSS 4.2, published 21 Aug 2026)
- [CVE-2026-59279: Spring AI unbounded session accumulation denial of service](https://junglewise.ai/threats/cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service) (high, CVSS 7.5, published 21 Aug 2026)
- [CVE-2026-47835: VMware Spring AI query injection in Vector Stores](https://junglewise.ai/threats/cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores) (high, CVSS 8.6, published 15 Jun 2026)
- [CVE-2026-41863: VMware Spring AI path traversal in Anthropic Skills API](https://junglewise.ai/threats/cve-2026-41863-vmware-spring-ai-path-traversal-in-anthropic-skills-api) (medium, CVSS 6.5, published 25 May 2026)
- [CVE-2026-41713: VMware Spring AI prompt injection in conversation memory](https://junglewise.ai/threats/cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory) (high, CVSS 8.2, published 12 May 2026)
- [CVE-2026-41712: VMware Spring AI data exposure in chat memory component](https://junglewise.ai/threats/cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-41705: VMware Spring AI filter expression injection in MilvusVectorStore](https://junglewise.ai/threats/cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore) (high, CVSS 8.6, published 9 May 2026)
- [CVE-2026-40980: Spring AI Vulnerable to OOM by attacker-controlled PDF](https://junglewise.ai/threats/cve-2026-40980-spring-ai-vulnerable-to-oom-by-attacker-controlled-pdf) (medium, CVSS 6.5, published 28 Apr 2026)
- [CVE-2026-40979: Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory](https://junglewise.ai/threats/cve-2026-40979-spring-ai-s-onnx-model-cache-defaults-to-world-writable) (medium, CVSS 6.1, published 28 Apr 2026)
- [CVE-2026-40978: SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…](https://junglewise.ai/threats/cve-2026-40978-spring-ai-has-sql-injection-in-cosmosdbvectorstore-dodelete) (high, CVSS 8.8, published 28 Apr 2026)
- [CVE-2026-40966: Spring AI improper access control in VectorStoreChatMemoryAdvisor](https://junglewise.ai/threats/cve-2026-40966-spring-ai-improper-access-control-in-vectorstorechatmemoryadvisor) (medium, CVSS 5.9, published 28 Apr 2026)
- [CVE-2026-40967: Spring AI has a VectorStore FilterExpression Converter injection](https://junglewise.ai/threats/cve-2026-40967-spring-ai-has-a-vectorstore-filterexpression-converter-injection) (high, CVSS 8.6, published 28 Apr 2026)
- [CVE-2026-22744: VMware Spring AI injection in RedisFilterExpressionConverter](https://junglewise.ai/threats/cve-2026-22744-vmware-spring-ai-injection-in-redisfilterexpressionconverter) (high, CVSS 7.5, published 27 Mar 2026)
- [CVE-2026-22743: Spring AI has a Cypher Injection vulnerability in Neo4jVectorFilterExpressionConverter](https://junglewise.ai/threats/cve-2026-22743-spring-ai-has-a-cypher-injection-vulnerability-in) (high, CVSS 7.5, published 27 Mar 2026)
- [CVE-2026-22742: Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs](https://junglewise.ai/threats/cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side) (high, CVSS 8.6, published 27 Mar 2026)
- [CVE-2026-22738: VMware Spring AI SpEL injection in SimpleVectorStore](https://junglewise.ai/threats/cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in) (critical, CVSS 9.8, published 27 Mar 2026)

## Most severe VMware Spring AI vulnerabilities

- [CVE-2026-22738: VMware Spring AI SpEL injection in SimpleVectorStore](https://junglewise.ai/threats/cve-2026-22738-in-spring-ai-a-spel-injection-vulnerability-exists-in) (critical, CVSS 9.8, published 27 Mar 2026)
- [CVE-2026-40978: SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…](https://junglewise.ai/threats/cve-2026-40978-spring-ai-has-sql-injection-in-cosmosdbvectorstore-dodelete) (high, CVSS 8.8, published 28 Apr 2026)
- [CVE-2026-47835: VMware Spring AI query injection in Vector Stores](https://junglewise.ai/threats/cve-2026-47835-vmware-spring-ai-query-injection-in-vector-stores) (high, CVSS 8.6, published 15 Jun 2026)
- [CVE-2026-41705: VMware Spring AI filter expression injection in MilvusVectorStore](https://junglewise.ai/threats/cve-2026-41705-vmware-spring-ai-filter-expression-injection-in-milvusvectorstore) (high, CVSS 8.6, published 9 May 2026)
- [CVE-2026-40967: Spring AI has a VectorStore FilterExpression Converter injection](https://junglewise.ai/threats/cve-2026-40967-spring-ai-has-a-vectorstore-filterexpression-converter-injection) (high, CVSS 8.6, published 28 Apr 2026)
- [CVE-2026-22742: Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs](https://junglewise.ai/threats/cve-2026-22742-spring-ai-s-spring-ai-bedrock-converse-contains-a-server-side) (high, CVSS 8.6, published 27 Mar 2026)
- [CVE-2026-41713: VMware Spring AI prompt injection in conversation memory](https://junglewise.ai/threats/cve-2026-41713-vmware-spring-ai-prompt-injection-in-conversation-memory) (high, CVSS 8.2, published 12 May 2026)
- [CVE-2026-59279: Spring AI unbounded session accumulation denial of service](https://junglewise.ai/threats/cve-2026-59279-spring-ai-unbounded-session-accumulation-denial-of-service) (high, CVSS 7.5, published 21 Aug 2026)
- [CVE-2026-41712: VMware Spring AI data exposure in chat memory component](https://junglewise.ai/threats/cve-2026-41712-vmware-spring-ai-data-exposure-in-chat-memory-component) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-47852: Spring AI insecure ONNX model cache directory creation](https://junglewise.ai/threats/cve-2026-47852-spring-ai-insecure-onnx-model-cache-directory-creation) (high, CVSS 7.5, published 27 Aug 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 3 | 0 | 0 |
| 24 Aug 2026 | 3 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other VMware technologies

- [VMware RabbitMQ](https://junglewise.ai/threats/technologies/vmware-rabbitmq): 30 vulnerabilities
- [VMware Spring Framework](https://junglewise.ai/threats/technologies/spring-framework): 26 vulnerabilities
- [VMware Cloud Foundation](https://junglewise.ai/threats/technologies/cloud-foundation): 21 vulnerabilities
- [VMware Spring Security](https://junglewise.ai/threats/technologies/spring-security): 19 vulnerabilities
- [VMware ESXi](https://junglewise.ai/threats/technologies/esxi): 11 vulnerabilities
- [VMware Spring Boot](https://junglewise.ai/threats/technologies/spring-boot): 11 vulnerabilities
- [VMware Fusion](https://junglewise.ai/threats/technologies/fusion): 8 vulnerabilities
- [VMware Avi Load Balancer](https://junglewise.ai/threats/technologies/avi-load-balancer): 7 vulnerabilities
- [VMware Spring for GraphQL](https://junglewise.ai/threats/technologies/spring-for-graphql): 7 vulnerabilities
- [VMware Spring Integration](https://junglewise.ai/threats/technologies/spring-integration): 7 vulnerabilities
- [VMware vSphere Foundation](https://junglewise.ai/threats/technologies/vsphere-foundation): 7 vulnerabilities
- [VMware Spring Web Services](https://junglewise.ai/threats/technologies/web-services): 7 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "VMware Spring AI vulnerabilities", https://junglewise.ai/threats/technologies/spring-ai, 9 November 2026.