CVE-2026-40967

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query.

Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Apr 28, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-409688.8When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can b CVE-2026-409695.3The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description CVE-2026-409706.8When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting CVE-2026-409719.1When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to th CVE-2026-409727.5An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote se CVE-2026-409737.0A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.se CVE-2026-409749.8Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affecte CVE-2026-409757.5Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} sho CVE-2026-409769.1In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an applicatio CVE-2026-409776.7When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corru CVE-2026-409788.8SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs.CVE-2026-409796.1In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0