CVE-2026-40967

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-40967	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:spring_ai::::::::
	cpe:2.3:a:vmware:spring_ai::::::::

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) En Spring AI, varias implementaciones de FilterExpressionConverter aceptan un objeto de expresión de filtro y los traducen a lenguajes de consulta específicos de almacenes vectoriales. En varios casos, las claves y los valores no se escapan correctamente, lo que lleva a la capacidad de alterar la consulta. Versiones afectadas: Spring AI: 1.0.0 - 1.0.5 (corregido en 1.0.6), 1.1.0 - 1.1.4 (corregido en 1.1.5)

Information

Published : 2026-04-28 07:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-40967

Mitre link : CVE-2026-40967

CVE.ORG link : CVE-2026-40967

JSON object : View

Products Affected

vmware

spring_ai

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-40967", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40967", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-29T03:55:37.906349Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.6", "versionType": "custom"}, {"status": "affected", "version": "1.1.0", "lessThan": "1.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-28T07:16:03.360", "references": [{"url": "https://spring.io/security/cve-2026-40967", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query.\n\nAffected versions:\nSpring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)"}, {"lang": "es", "value": "En Spring AI, varias implementaciones de FilterExpressionConverter aceptan un objeto de expresi\u00f3n de filtro y los traducen a lenguajes de consulta espec\u00edficos de almacenes vectoriales. En varios casos, las claves y los valores no se escapan correctamente, lo que lleva a la capacidad de alterar la consulta.\n\nVersiones afectadas:\nSpring AI: 1.0.0 - 1.0.5 (corregido en 1.0.6), 1.1.0 - 1.1.4 (corregido en 1.1.5)"}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CD6DC44-CDE8-47E4-A788-6D8AE716396F", "versionEndExcluding": "1.0.6", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5013645B-3914-4A40-8D42-CB47344963A7", "versionEndExcluding": "1.1.5", "versionStartIncluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}