Vulnerability · Published Jun 15, 2026 · Assigned by vmware
CVE-2026-47835Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
High 8.6
In plain English
A high-severity security flaw in Spring AI from Spring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.springframework.ai:spring-ai-elasticsearch-store | 1.0.9 | GHSA-cmwh-w62w-r2mf |
| Maven | org.springframework.ai:spring-ai-elasticsearch-store | 1.1.8 | GHSA-cmwh-w62w-r2mf |
| Maven | org.springframework.ai:spring-ai-gemfire-store | 1.0.9 | GHSA-cmwh-w62w-r2mf |
| Maven | org.springframework.ai:spring-ai-gemfire-store | 1.1.8 | GHSA-cmwh-w62w-r2mf |
| Maven | org.springframework.ai:spring-ai-opensearch-store | 1.0.9 | GHSA-cmwh-w62w-r2mf |
| Maven | org.springframework.ai:spring-ai-opensearch-store | 1.1.8 | GHSA-cmwh-w62w-r2mf |
Affected products (as reported)
Weakness: CWE-943 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L