CVE-2026-22743

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-22743	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:spring_ai::::::::
	cpe:2.3:a:vmware:spring_ai::::::::

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) El ’spring-ai-neo4j-store’ de Spring AI contiene una vulnerabilidad de inyección de Cypher en ’Neo4jVectorFilterExpressionConverter’. Cuando se pasa una cadena controlada por el usuario como clave de expresión de filtro en ’Neo4jVectorFilterExpressionConverter’ de ’spring-ai-neo4j-store’, ’doKey()’ incrusta la clave en un accesor de propiedad Cypher delimitado por comillas invertidas (node.’metadata.’) después de eliminar solo las comillas dobles, sin escapar las comillas invertidas incrustadas. Este problema afecta a Spring AI: desde 1.0.0 antes de 1.0.5, desde 1.1.0 antes de 1.1.4.

Information

Published : 2026-03-27 06:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-22743

Mitre link : CVE-2026-22743

CVE.ORG link : CVE-2026-22743

JSON object : View

Products Affected

vmware

spring_ai

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-22743", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22743", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T19:38:40.716545Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.5", "versionType": "custom"}, {"status": "affected", "version": "1.1.0", "lessThan": "1.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-27T06:16:37.977", "references": [{"url": "https://spring.io/security/cve-2026-22743", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Spring AI's\u00a0spring-ai-neo4j-store\u00a0contains a Cypher injection vulnerability in\u00a0Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in\u00a0Neo4jVectorFilterExpressionConverter\u00a0of\u00a0spring-ai-neo4j-store,\u00a0doKey()\u00a0embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4."}, {"lang": "es", "value": "El \u2019spring-ai-neo4j-store\u2019 de Spring AI contiene una vulnerabilidad de inyecci\u00f3n de Cypher en \u2019Neo4jVectorFilterExpressionConverter\u2019. Cuando se pasa una cadena controlada por el usuario como clave de expresi\u00f3n de filtro en \u2019Neo4jVectorFilterExpressionConverter\u2019 de \u2019spring-ai-neo4j-store\u2019, \u2019doKey()\u2019 incrusta la clave en un accesor de propiedad Cypher delimitado por comillas invertidas (node.\u2019metadata.\u2019) despu\u00e9s de eliminar solo las comillas dobles, sin escapar las comillas invertidas incrustadas. Este problema afecta a Spring AI: desde 1.0.0 antes de 1.0.5, desde 1.1.0 antes de 1.1.4."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28BAEC64-E23B-478B-B206-5580BB00516F", "versionEndExcluding": "1.0.5", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3774C35-AE82-486B-8E13-8FCC34D3CA30", "versionEndExcluding": "1.1.4", "versionStartIncluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}