PT-2026-35687 · Vmware · Spring Ai

Sharlong Wen · CVE-2026-40978 · Published 2026-04-28 · Updated 2026-04-28

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4

Description An issue in CosmosDBVectorStore allows attackers to execute arbitrary SQL queries by using crafted document IDs.

Recommendations Update versions 1.0.0 through 1.0.5 to version 1.0.6. Update versions 1.1.0 through 1.1.4 to version 1.1.5.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-40978

GHSA-63C8-M9M2-CVR3

Affected Products

Spring Ai

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40978.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40978 · Security Note
• https://spring.io/security/cve-2026-40978 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-40978 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-63c8-m9m2-cvr3 · Vendor Advisory
• https://github.com/spring-projects/spring-ai · Note
• https://t.me/cveNotify/161223 · Telegram Post
• https://t.me/CVEtracker/52043 · Telegram Post