{"id":"GHSA-cmwh-w62w-r2mf","summary":"Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores","details":"In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.\n\nAffected versions:\nSpring AI 1.0.0 through 1.0.x (fix 1.0.9).\nSpring AI 1.1.0 through 1.1.x (fix 1.1.8).","aliases":["CVE-2026-47835"],"modified":"2026-08-26T15:26:24.875966Z","published":"2026-06-15T21:30:39Z","database_specific":{"nvd_published_at":"2026-06-15T20:16:28Z","cwe_ids":["CWE-943"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2026-08-26T15:01:16Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47835"},{"type":"WEB","url":"https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991"},{"type":"WEB","url":"https://github.com/spring-projects/spring-ai/commit/9787991aa1ed92c511131ddf4e142bd94051e6e7"},{"type":"PACKAGE","url":"https://github.com/spring-projects/spring-ai"},{"type":"WEB","url":"https://github.com/spring-projects/spring-ai/releases/tag/v1.0.9"},{"type":"WEB","url":"https://github.com/spring-projects/spring-ai/releases/tag/v1.1.8"},{"type":"WEB","url":"https://spring.io/security/cve-2026-47835"}],"affected":[{"package":{"name":"org.springframework.ai:spring-ai-opensearch-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-opensearch-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.9"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8"],"database_specific":{"last_known_affected_version_range":"\u003c= 1.0.8","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json"}},{"package":{"name":"org.springframework.ai:spring-ai-opensearch-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-opensearch-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.8"}]}],"versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7"],"database_specific":{"last_known_affected_version_range":"\u003c= 1.1.7","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json"}},{"package":{"name":"org.springframework.ai:spring-ai-elasticsearch-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-elasticsearch-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.9"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json","last_known_affected_version_range":"\u003c= 1.0.8"}},{"package":{"name":"org.springframework.ai:spring-ai-elasticsearch-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-elasticsearch-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.8"}]}],"versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json","last_known_affected_version_range":"\u003c= 1.1.7"}},{"package":{"name":"org.springframework.ai:spring-ai-gemfire-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-gemfire-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.9"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8"],"database_specific":{"last_known_affected_version_range":"\u003c= 1.0.8","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json"}},{"package":{"name":"org.springframework.ai:spring-ai-gemfire-store","ecosystem":"Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-gemfire-store"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.8"}]}],"versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7"],"database_specific":{"last_known_affected_version_range":"\u003c= 1.1.7","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-cmwh-w62w-r2mf/GHSA-cmwh-w62w-r2mf.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"}]}