Vulnerabilities

TI-2026-18254 CVE-2026-22729 · GHSA-rp9g-qx29-88cp

CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter

MEDIUM 44

A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted filter expressions.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00553 Published 2026-03-18 Fixed in 1.0.4, 1.1.3 CWE-917

TI-2026-18255 CVE-2026-22730 · GHSA-c267-rfvc-mvpm

CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

MEDIUM 41

A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00543 Published 2026-03-18 Fixed in 1.0.4, 1.1.3 CWE-89

Vulnerabilities

Filters

CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter

CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter