5.9
Moyenne
CVE-2026-40966 In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat…
Description
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected.
Produits et versions touchés
Autres CVE de Spring AI
Les 5 CVE de Spring AI →
CVE-2026-41713
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an…
8.2
Élevée
CVE-2026-41712
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result…
7.5
Élevée
CVE-2026-22729
A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass…
8.6
Élevée
CVE-2026-22730
A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass…
8.8
Élevée