PT-2026-35676 · Vmware · Spring Ai

Jinyeong Seol + 1 · Published 2026-04-28 · Updated 2026-04-29 · CVE-2026-40966

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spring AI (affected versions not specified)

Description An attacker can bypass conversation isolation and exfiltrate sensitive memory from other users' chat histories, including secrets and credentials. This occurs when applications use VectorStoreChatMemoryAdvisor and pass user-supplied input as the conversationId variable, allowing the injection of filter logic.

Recommendations Avoid passing user-supplied input directly as the conversationId when using VectorStoreChatMemoryAdvisor.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-40966

GHSA-V6X6-PJXW-3PV2

Affected Products

Spring Ai

References · 8

• https://spring.io/security/cve-2026-40966 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v6x6-pjxw-3pv2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40966 · Security Note
• https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?version=3.1&vector=AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · Security Note
• https://github.com/spring-projects/spring-ai · Note
• https://t.me/CVEtracker/52054 · Telegram Post
• https://twitter.com/vuldb/status/2049372002977517636 · Twitter Post
• https://t.me/cveNotify/161219 · Telegram Post