Skip to content
OpenAdvisories

Product · VMware

Spring AI

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-22730 Public exploit

    CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

    A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.

    VMware Spring AI org.springframework.ai:spring-ai-mariadb-store Maven