Spring AI SpEL Injection: From Vector Search to Remote Code Execution (CVE-2026-22738)
ID: 7ae2426e-356b-544a-afdb-b18267ac1926
STIX ID: report--7ae2426e-356b-544a-afdb-b18267ac1926
Feed Name: Resecurity
Threat Score
A technical advisory describing CVE-2026-22738: a critical SpEL injection in Spring AI's SimpleVectorStore that allows attacker-controlled expressions to be evaluated using StandardEvaluationContext, enabling remote code execution, full system compromise, data exfiltration, and LLM prompt poisoning; includes vulnerable code, PoC/exploit steps, affected versions (spring-ai-core 1.0.0–1.0.4 and 1.1.0-M1–1.1.3), and mitigations such as upgrading to fixed versions and using SimpleEvaluationContext.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.