CVE-2026-41863

Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories. Affected versions: Spring AI: 1.1.0 through 1.1.x

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-41863	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-05-25 07:16

Updated : 2026-07-23 17:10

NVD link : CVE-2026-41863

Mitre link : CVE-2026-41863

CVE.ORG link : CVE-2026-41863

JSON object : View

Products Affected

vmware

spring_ai

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-41863", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41863", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T14:19:04.863084Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.1.0", "versionType": "custom", "lessThanOrEqual": "1.1.x"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-25T07:16:16.377", "references": [{"url": "https://spring.io/security/cve-2026-41863", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.\n\nAffected versions:\nSpring AI: 1.1.0 through 1.1.x"}, {"lang": "es", "value": "El soporte de Spring AI para la API de Habilidades de Anthropic utilizaba nombres de archivo influenciados por LLM sin sanear en Path.resolve antes de escribir archivos en el disco. Esto podr\u00eda permitir a un usuario malintencionado escribir archivos fuera del directorio de destino previsto, incluyendo directorios restringidos.\n\nVersiones afectadas:\nSpring AI: 1.1.0 hasta 1.1.x"}], "lastModified": "2026-07-23T17:10:00.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79B32FFF-1F8A-4904-BFC7-C41C07FFC575", "versionEndExcluding": "1.1.7", "versionStartIncluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}