Skip to main content

🪐 Backed by $16.5M to build the security workforce for the security workforce. Meet the new Cantina.

Vulnerability disclosure

User-controlled filter keys enable SpEL code execution

CVE-2026-22738

Affected product
Spring AI
Severity
Critical
CVSS
9.8
Weakness
CWE-917
Published

Disclosure summary

CVE-2026-22738 is a critical-severity CWE-917 vulnerability in Spring AI. User-controlled filter keys enable SpEL code execution. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.

Verification standard

Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.