Vulnerability · Published Apr 28, 2026 · Assigned by vmware
CVE-2026-40967
High 8.6
In plain English
A high-severity code injection in Spring AI from Spring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.springframework.ai:spring-ai-vector-store | 1.0.6 | GHSA-qc4j-qjqx-vr58 |
| Maven | org.springframework.ai:spring-ai-vector-store | 1.1.5 | GHSA-qc4j-qjqx-vr58 |
Affected products (as reported)
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L