Description
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected.
This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spring | Spring AI | 1.0.0 – < 1.0.5, 1.1.0 – < 1.1.4 | 1.0.5 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
n0n4m3x41/CVE-2026-22738-POC ★ 13 · Apr 2, 2026
PoC for CVE-2026-22738
-
rockmelodies/CVE-2026-22738 ★ 2 · Apr 3, 2026
SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.springframework.ai:spring-ai-vector-store | >= 1.0.0, < 1.0.5 | 1.0.5 | GHSA-fvh3-672c-7p6c |
| Maven | org.springframework.ai:spring-ai-vector-store | >= 1.1.0-M1, < 1.1.4 | 1.1.4 | GHSA-fvh3-672c-7p6c |