Vulnerability · Published Mar 27, 2026 · Assigned by vmware
CVE-2026-22742Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching
High 8.6
In plain English
A high-severity server-side request forgery in Spring AI from Spring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to induce the server to issue HTTP requests to unintended internal or external destinations. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.springframework.ai:spring-ai-bedrock-converse | 1.0.5 | GHSA-mhrg-94vw-45c5 |
| Maven | org.springframework.ai:spring-ai-bedrock-converse | 1.1.4 | GHSA-mhrg-94vw-45c5 |
Affected products (as reported)
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N