Summary
User-controlled filter keys enable SpEL code execution. This critical-severity finding affects Spring AI.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
User-controlled filter keys enable SpEL code execution
CVE-2026-22738
- Affected product
- Spring AI
- Severity
- Critical · CVSS 9.8
- Weakness
- CWE-917
- Disclosed