high7.5
CVE-2026-47852
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.
Impact
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Ai | from 1.0.0 before 1.0.10 from 1.1.0 before 1.1.9 from 2.0.0 before 2.0.0.1 |