CVE-2026-59308

Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation PUBLISHED

Description (CNA)

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Affected (CNA)

Vendor / product	Versions
Spring / Spring AI	affected 2.0.0

CWE

CWE-668

References

https://spring.io/security/cve-2026-59308

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.