Security Advisory

CVE-2026-47835

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-15 18:54:19

Last updated 2026-06-15 20:06:56

Assigner vmware

CVSS score 8.6

State PUBLISHED

Description

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).

← Browse all CVEs View on cve.org ↗