VMware Spring AI vulnerabilities
5 published CVEs name VMware Spring AI among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-41713
Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
VMware · Spring AI
High8.2 - CVE-2026-41712
ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
VMware · Spring AI
High7.5 - CVE-2026-40966
VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration
VMware · Spring AI
Medium5.9 - CVE-2026-22729
CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
VMware · Spring AI
High8.6 - CVE-2026-22730
CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter
VMware · Spring AI
High8.8