CVE-2026-22738: SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22738?
CVE-2026-22738 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2026-22738?
To fix CVE-2026-22738, you should upgrade to Spring AI version 1.1.5 or higher, or patch earlier affected versions.
What causes CVE-2026-22738?
CVE-2026-22738 is caused by SpEL injection vulnerability in the SimpleVectorStore component that allows user-supplied values to be used as filter keys.
Who is affected by CVE-2026-22738?
CVE-2026-22738 affects users running Spring AI versions between 1.0.0 and 1.1.4 inclusive.
Can CVE-2026-22738 be exploited remotely?
Yes, CVE-2026-22738 can be exploited remotely, allowing attackers to execute arbitrary code on the affected systems.