Spring-Ai — CraftedSignal Threat Feed

Spring AI Redis Store TAG Injection Vulnerability (CVE-2026-22744)

hello@craftedsignal.io — Fri, 27 Mar 2026 06:16:38 +0000

CVE-2026-22744 is a critical vulnerability found within the RedisFilterExpressionConverter of the Spring AI Redis Store. The vulnerability arises because the stringValue() function directly inserts user-supplied strings into the @field:{VALUE} RediSearch TAG block without proper sanitization or escaping. This allows an attacker to inject arbitrary commands or data into the Redis database if they can control the input used as a filter value for a TAG field. This vulnerability affects…

Spring AI SimpleVectorStore SpEL Injection Vulnerability (CVE-2026-22738)

hello@craftedsignal.io — Fri, 27 Mar 2026 06:16:37 +0000

A SpEL (Spring Expression Language) injection vulnerability, identified as CVE-2026-22738, has been discovered in the SimpleVectorStore component of Spring AI. This flaw occurs when a user-supplied value is used as a filter expression key within SimpleVectorStore. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system. The vulnerability affects Spring AI versions 1.0.0 before 1.0.5 and 1.1.0 before 1.1.4. Only applications that…

Spring AI BedrockProxyChatModel SSRF Vulnerability (CVE-2026-22742)

hello@craftedsignal.io — Fri, 27 Mar 2026 06:16:37 +0000

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the spring-ai-bedrock-converse library within Spring AI. The vulnerability resides in the BedrockProxyChatModel component and arises during the processing of multimodal messages. Specifically, when handling user-supplied media URLs, the application fails to adequately validate these URLs. This lack of validation allows a malicious actor to inject arbitrary URLs, potentially causing the server to make unintended HTTP…

CVE-2026-22729: JSONPath Injection Vulnerability in Spring AI's PgVectorStore

hello@craftedsignal.io — Thu, 19 Mar 2026 12:35:09 +0000

CVE-2026-22729 is a newly identified JSONPath Injection vulnerability affecting the PgVectorStore component within the Spring AI framework. The vulnerability arises from insufficient input sanitization when processing JSONPath expressions, potentially allowing attackers to inject malicious code into queries. Successful exploitation could lead to unauthorized data access, modification, or even remote code execution depending on the application’s configuration and permissions. This vulnerability…