Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

Two high-severity vulnerabilities were disclosed in Spring AI: CVE-2026-40967 (improper escaping in FilterExpression converters enabling query manipulation) and CVE-2026-40978 (SQL injection in CosmosDBVectorStore.doDelete allowing arbitrary SQL via crafted document IDs). Both affect Spring AI versions 1.0.0–1.0.x and 1.1.0–1.1.x; maintainers recommend upgrading to 1.0.6 or 1.1.5 to mitigate the issues. Exploitation requires using the affected VectorStore implementations and allowing user-supplied input to reach vulnerable parameters without validation.