Summary
Filter keys enable Cypher injection in Neo4j stores. This high-severity finding affects Spring AI.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Filter keys enable Cypher injection in Neo4j stores
CVE-2026-22743
- Affected product
- Spring AI
- Severity
- High · CVSS 7.5
- Weakness
- CWE-89
- Disclosed