{"id":"CVE-2026-47835","summary":"Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores","details":"In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.\n\nAffected versions:\nSpring AI 1.0.0 through 1.0.x (fix 1.0.9).\nSpring AI 1.1.0 through 1.1.x (fix 1.1.8).","modified":"2026-07-15T01:49:18.446801988Z","published":"2026-06-15T18:54:19.841Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47835.json","unresolved_ranges":[{"extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.0.9"},{"introduced":"1.1.0"},{"fixed":"1.1.8"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.0.x"},{"introduced":"1.1.0"},{"fixed":"1.1.x"}],"source":"DESCRIPTION"}],"cna_assigner":"vmware","cwe_ids":["CWE-943"]},"references":[{"type":"WEB","url":"https://spring.io/security/cve-2026-47835"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47835.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47835"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/spring-projects/spring-ai","events":[{"introduced":"fcd2803f36f35939c20ed152c9c1b0863fa35dcf"},{"fixed":"634e8e30b6bcc3ea96b858406d9a0db1fe61ce79"},{"introduced":"fa4c61eabeba0a69147b3c00a3b50380c1f25a75"},{"fixed":"eb3992ca27a9931ca79d7e2a817badfbb0fa6867"}],"database_specific":{"cpe":"cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.0.9"},{"introduced":"1.1.0"},{"fixed":"1.1.8"}],"source":"CPE_RANGE"}}],"versions":["v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-47835.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"}]}