CVE-2026-59319

Katalog CVE

CVSS 4.3 · Medium EPSS 0,30%

Kerentanan Improper Neutralization of Special Elements in Data Query Logic pada vmware spring ai. Skor CVSS 3.1 4.3 (Medium) menurut vmware.com.

Deskripsi (NVD)

RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same class which do escape their inputs. An application that passes user-controlled values to findByMetadata() on a tag-typed metadata field allows an attacker to inject RediSearch syntax (e.g. x} | *) that breaks out of the tag clause and matches all indexed chat messages across every conversation in the index. Spring AI 2.0.0

Rincian

Terbit di NVD

27 Agustus 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber vmware.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-943: Improper Neutralization of Special Elements in Data Query Logic

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://spring.io/security/cve-2026-59319 advisory vendor