PT-2026-43006 · Spring Ai · Spring Ai

Published 2026-05-25 · Updated 2026-06-01 · CVE-2026-41863

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.1.0 through 1.1.x

Description Support for Anthropic's Skills API uses filenames influenced by the Large Language Model (LLM) without proper sanitization in the Path.resolve function before writing files to disk. This flaw allows a malicious user to perform a path traversal attack, writing files outside the intended target directory and potentially accessing restricted directories.

Recommendations Update Spring AI to a version later than 1.1.x.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-41863

GHSA-CC4M-MP48-X7QG

Affected Products

Spring Ai

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41863.json · Exploit
• https://spring.io/security/cve-2026-41863 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cc4m-mp48-x7qg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41863 · Security Note
• https://osv.dev/vulnerability/CVE-2026-41863 · Vendor Advisory
• https://github.com/spring-projects/spring-ai · Note
• https://twitter.com/CVEnew/status/2058935281894494702 · Twitter Post
• https://t.me/cveNotify/165466 · Telegram Post
• https://t.me/CVEtracker/54827 · Telegram Post