high8.6
CVE-2026-47835
In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB.
Impact
In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.springframework.ai:spring-ai-opensearch-store | >= 1.0.0, <= 1.0.8 | 1.0.9 |
| maven | org.springframework.ai:spring-ai-elasticsearch-store | >= 1.0.0, <= 1.0.8 | 1.0.9 |
| maven | org.springframework.ai:spring-ai-gemfire-store | >= 1.0.0, <= 1.0.8 | 1.0.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Ai | from 1.0.0 before 1.0.9 from 1.1.0 before 1.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-cmwh-w62w-r2mf
- https://nvd.nist.gov/vuln/detail/CVE-2026-47835
- https://spring.io/security/cve-2026-47835
- https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991
- https://github.com/spring-projects/spring-ai/commit/9787991aa1ed92c511131ddf4e142bd94051e6e7
- https://github.com/spring-projects/spring-ai/releases/tag/v1.0.9
- https://github.com/spring-projects/spring-ai/releases/tag/v1.1.8