Vulnerability Description
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Spring Ai | >= 1.0.0, < 1.0.6 |
Related Weaknesses (CWE)
References
- https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?version=3.1&vector=AV:N/AC:US Government Resource
- https://spring.io/security/cve-2026-40966Vendor Advisory
FAQ
What is CVE-2026-40966?
CVE-2026-40966 is a vulnerability with a CVSS score of 5.9 (MEDIUM). In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conve...
How severe is CVE-2026-40966?
CVE-2026-40966 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-40966?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Spring Ai.