CVE-2026-22738

In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-22738	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:spring_ai::::::::
	cpe:2.3:a:vmware:spring_ai::::::::

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) En Spring AI, existe una vulnerabilidad de inyección SpEL en SimpleVectorStore cuando un valor proporcionado por el usuario se utiliza como clave de expresión de filtro. Un actor malicioso podría explotar esto para ejecutar código arbitrario. Solo las aplicaciones que utilizan SimpleVectorStore y pasan entrada proporcionada por el usuario como clave de expresión de filtro se ven afectadas. Este problema afecta a Spring AI: desde 1.0.0 antes de 1.0.5, desde 1.1.0 antes de 1.1.4.

Information

Published : 2026-03-27 06:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-22738

Mitre link : CVE-2026-22738

CVE.ORG link : CVE-2026-22738

JSON object : View

Products Affected

vmware

spring_ai

CWE

CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

{"id": "CVE-2026-22738", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22738", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-28T03:55:48.325602Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.5", "versionType": "custom"}, {"status": "affected", "version": "1.1.0", "lessThan": "1.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-27T06:16:37.663", "references": [{"url": "https://spring.io/security/cve-2026-22738", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-917"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-88"}]}], "descriptions": [{"lang": "en", "value": "In Spring AI, a SpEL injection vulnerability exists in\u00a0SimpleVectorStore\u00a0when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code.\u00a0Only applications that use\u00a0SimpleVectorStore\u00a0and pass user-supplied input as a filter expression key are affected.\nThis issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4."}, {"lang": "es", "value": "En Spring AI, existe una vulnerabilidad de inyecci\u00f3n SpEL en SimpleVectorStore cuando un valor proporcionado por el usuario se utiliza como clave de expresi\u00f3n de filtro. Un actor malicioso podr\u00eda explotar esto para ejecutar c\u00f3digo arbitrario. Solo las aplicaciones que utilizan SimpleVectorStore y pasan entrada proporcionada por el usuario como clave de expresi\u00f3n de filtro se ven afectadas.\nEste problema afecta a Spring AI: desde 1.0.0 antes de 1.0.5, desde 1.1.0 antes de 1.1.4."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28BAEC64-E23B-478B-B206-5580BB00516F", "versionEndExcluding": "1.0.5", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3774C35-AE82-486B-8E13-8FCC34D3CA30", "versionEndExcluding": "1.1.4", "versionStartIncluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}