CVE-2026-41705 HIGH

CVE-2026-41705

Vendor Spring
Product Spring AI
Weakness CWE-917
Published May 9, 2026
Last update May 11, 2026
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgrade to 1.0.7 or greater. Spring AI 1.1.x: affected from 1.1.0 through latest 1.1.x; upgrade to 1.1.6 or greater.

Key dates

02Disclosure timeline

May 9, 2026 CVE published
May 11, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-51593 Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability CVE-2024-0715 EL Injection Vulnerability in Hitachi Global Link Manager CVE-2024-7552 DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection CVE-2022-4146 EL Injection Vulnerability in Hitachi Replication Manager CVE-2026-40477 Improper restriction of the scope of accessible objects in Thymeleaf expressions