CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.6. See the original NVD description below for full technical details.
CVE
CVE-2026-40967
Severity
HIGH
CVSS
8.6
EPSS
0.39%
Original NVD Description
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Related CVEs
Other vulnerabilities affecting the same vendor(s)