PT-2026-35687 · Vmware · Spring Ai

Sharlong Wen · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-40978

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4

Description An issue in CosmosDBVectorStore allows attackers to execute arbitrary SQL queries by using crafted document IDs.

Recommendations Update versions 1.0.0 through 1.0.5 to version 1.0.6. Update versions 1.1.0 through 1.1.4 to version 1.1.5.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-40978

GHSA-63C8-M9M2-CVR3

Affected Products

Spring Ai

References · 6

• https://spring.io/security/cve-2026-40978 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-63c8-m9m2-cvr3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40978 · Security Note
• https://github.com/spring-projects/spring-ai · Note
• https://t.me/cveNotify/161223 · Telegram Post
• https://t.me/CVEtracker/52043 · Telegram Post