← CVE Intelligence

CVE-2026-47835

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores PUBLISHED

Description (CNA)

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).

Affected (CNA)

Vendor / productVersions
Spring / Spring AIaffected 1.0.0 before 1.0.9; affected 1.1.0 before 1.1.8

CWE

CWE-943

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.