Skip to content
OpenAdvisories
Medium · 4.2 CVE-2026-59308 EUVD-2026-63932GHSA-h4jw-w55g-65gf

Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation

Published Aug 21, 2026 · Updated Aug 21, 2026 · Assigned by vmware

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts.
Affected versions:
Spring AI: 2.0.0

Affected products

VendorProductAffectedFixed
Spring Spring AI 2.0.0 —

References