8.8
Élevée
CVE-2026-22730 A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass…
Description
A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.
Produits et versions touchés
Autres CVE de Spring AI
Les 5 CVE de Spring AI →
CVE-2026-41713
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an…
8.2
Élevée
CVE-2026-41712
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result…
7.5
Élevée
CVE-2026-40966
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat…
5.9
Moyenne
CVE-2026-22729
A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass…
8.6
Élevée