{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22744", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-01-09T06:54:49.675Z", "datePublished": "2026-03-27T05:38:59.633Z", "dateUpdated": "2026-03-27T05:38:59.633Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-03-27T05:38:59.633Z"}, "affected": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.5", "versionType": "custom"}, {"status": "affected", "version": "1.1.0", "lessThan": "1.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In\u00a0RedisFilterExpressionConverter\u00a0of\u00a0spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field,\u00a0stringValue()\u00a0inserts the value directly into the\u00a0@field:{VALUE}\u00a0RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<code>In&nbsp;RedisFilterExpressionConverter</code>&nbsp;of&nbsp;<code>spring-ai-redis-store</code>, when a user-controlled string is passed as a filter value for a TAG field,&nbsp;<code>stringValue()</code>&nbsp;inserts the value directly into the&nbsp;<code>@field:{VALUE}</code>&nbsp;RediSearch TAG block without escaping characters.<p>This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.</p>"}]}], "references": [{"url": "https://spring.io/security/cve-2026-22744"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In\u00a0RedisFilterExpressionConverter\u00a0of\u00a0spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field,\u00a0stringValue()\u00a0inserts the value directly into the\u00a0@field:{VALUE}\u00a0RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4."}], "id": "CVE-2026-22744", "lastModified": "2026-03-27T06:16:38.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@vmware.com", "type": "Secondary"}]}, "published": "2026-03-27T06:16:38.120", "references": [{"source": "security@vmware.com", "url": "https://spring.io/security/cve-2026-22744"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Received"}

{}

{"analysis": {"en": {"generated_at": "2026-03-27T07:20:49.325734+00:00", "value": {"mitigation_remediation": ["Upgrade Spring AI to\u202f1.0.5 or later, or to\u202f1.1.4 or later if on the 1.1 series."], "summary": {"action": "Immediate Patch", "impact": "Potential Unauthorized Data Access through RediSearch injection"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Spring AI for all releases from 1.0.0 up to, but not including, 1.0.5 as well as from 1.1.0 up to, but not including, 1.1.4. Systems running these versions should be considered at risk.", "description_and_impact": "Spring AI 1.x versions contain a flaw in the RedisFilterExpressionConverter where a user\u2011controlled string supplied as a FILTER value for a TAG field is inserted directly into the @field:{VALUE} RediSearch query without escaping. This improper input handling can be exploited to inject arbitrary search syntax, allowing an attacker to manipulate or expand the query logic. The result may be unauthorized data retrieval or manipulation of query results, impacting confidentiality and integrity of the stored data.", "risk_and_exploitability": "The CVSS score of 7.5 indicates high severity, and the exploitability is further suggested by the lack of escaping. While EPSS data is not available and the vulnerability is not listed in CISA\u2019s KEV, the absence of mitigation in earlier releases means the attack vector is likely via a user\u2011supplied filter expression, which can be invoked by any authenticated or potentially unauthenticated client depending on application configuration. Given the high score and the straightforward injection path, the risk for exposed systems is significant until patched."}}}}, "created": "2026-03-27T09:22:07.496338+00:00", "updated": "2026-03-27T09:22:07.496368+00:00", "vendors": []}