CVE-2026-59308: Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Spring AI (Semantic Cache)to a version that resolves this vulnerability.Fixed in 2.0.0 - Compensating control
Until patched, ensure Semantic Cache is configured to prevent cross-tenant/system-prompt sharing so cached responses cannot be retrieved across unrelated contexts (e.g., isolate caches per tenant/prompt at the application or cache-store level).
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access and low-privileged access to the affected Spring AI deployment. Exploitation also has high attack complexity and does not require user interaction.
What is exposed if exploitation succeeds?
Cached responses may be shared across unrelated system-prompt contexts, undermining cross-tenant isolation. The stated impact includes limited confidentiality and integrity effects, with no availability impact.
Which version is identified as affected?
The affected version listed is Spring AI 2.0.0.