CVE-2026-59308

MediumCVSS 4.3/10Last modified Oct 16, 2026

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2026
Last modified
Oct 16, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-593099.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCeCVE-2026-593109.8VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploCVE-2026-593116.8A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating CVE-2026-593139.8Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring FCVE-2026-593143.7Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input CVE-2026-593155.3The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 SpringCVE-2026-593168.2Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsenCVE-2026-593176.5DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytesCVE-2026-593189.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tooCVE-2026-593194.3RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediCVE-2026-593206.5When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanentCVE-2026-593215.4A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not t
CVE-2026-59308: Medium severity, CVSS 4.3 | Vulnix