CVE-2026-22743

Spring AI

High

CVSS Details

CVSS Score

7.5 HIGH

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-89 SQL Injection (Cypher Injection)

Description

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

View on NVD

Timeline

Discovered

March 2026

Vendor Notified

March 2026

Patch Released

March 27, 2026 (v1.0.5, v1.1.4)

Public Disclosure

March 27, 2026