{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22744", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-01-09T06:54:49.675Z", "datePublished": "2026-03-27T05:38:59.633Z", "dateUpdated": "2026-03-27T19:39:20.156Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-03-27T05:38:59.633Z"}, "affected": [{"vendor": "Spring", "product": "Spring AI", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.5", "versionType": "custom"}, {"status": "affected", "version": "1.1.0", "lessThan": "1.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In\u00a0RedisFilterExpressionConverter\u00a0of\u00a0spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field,\u00a0stringValue()\u00a0inserts the value directly into the\u00a0@field:{VALUE}\u00a0RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<code>In&nbsp;RedisFilterExpressionConverter</code>&nbsp;of&nbsp;<code>spring-ai-redis-store</code>, when a user-controlled string is passed as a filter value for a TAG field,&nbsp;<code>stringValue()</code>&nbsp;inserts the value directly into the&nbsp;<code>@field:{VALUE}</code>&nbsp;RediSearch TAG block without escaping characters.<p>This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.</p>"}]}], "references": [{"url": "https://spring.io/security/cve-2026-22744"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22744", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T19:24:06.429869Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T19:39:20.156Z"}}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "matchCriteriaId": "28BAEC64-E23B-478B-B206-5580BB00516F", "versionEndExcluding": "1.0.5", "versionStartIncluding": "1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3774C35-AE82-486B-8E13-8FCC34D3CA30", "versionEndExcluding": "1.1.4", "versionStartIncluding": "1.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In\u00a0RedisFilterExpressionConverter\u00a0of\u00a0spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field,\u00a0stringValue()\u00a0inserts the value directly into the\u00a0@field:{VALUE}\u00a0RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4."}], "id": "CVE-2026-22744", "lastModified": "2026-04-16T20:24:46.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@vmware.com", "type": "Secondary"}]}, "published": "2026-03-27T06:16:38.120", "references": [{"source": "security@vmware.com", "tags": ["Vendor Advisory"], "url": "https://spring.io/security/cve-2026-22744"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.0.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.1.0,1.1.4)"}}], "enrichment": {"confidence": 90.0, "confidence_source": "matching", "scores": [{"score": 90.0, "source": "matching"}]}, "original": {"product": "Spring AI", "source": "cna", "vendor": "Spring"}, "product": "spring", "vendor": "spring"}], "analysis": {"en": {"generated_at": "2026-04-17T11:28:46.523556+00:00", "value": {"mitigation_remediation": ["Upgrade Spring AI to 1.0.5 or later, or to 1.1.4 or later if on the 1.1 series.", "Restrict or disable user-supplied filter expressions for TAG fields until the patch is applied.", "Implement input validation or escaping for filter values to prevent injection before the next vulnerability fix."], "summary": {"action": "Immediate Patch", "impact": "Potential Unauthorized Data Access through RediSearch injection"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Spring AI for all releases from 1.0.0 up to, but not including, 1.0.5 as well as from 1.1.0 up to, but not including, 1.1.4. Systems running these versions should be considered at risk.", "description_and_impact": "Spring AI 1.x versions contain a flaw in the RedisFilterExpressionConverter where a user\u2011controlled string supplied as a FILTER value for a TAG field is inserted directly into the @field:{VALUE} RediSearch query without escaping. This improper input handling can be exploited to inject arbitrary search syntax, allowing an attacker to manipulate or expand the query logic. The result may be unauthorized data retrieval or manipulation of query results, impacting confidentiality and integrity of the stored data.", "risk_and_exploitability": "The CVSS score of 7.5 indicates high severity, and the exploitability is further suggested by the lack of escaping. While EPSS score is < 1% and the vulnerability is not listed in CISA\u2019s KEV, the absence of mitigation in earlier releases means the attack vector is likely via a user\u2011supplied filter expression, which can be invoked by any authenticated or potentially unauthenticated client depending on application configuration."}}}}, "created": "2026-03-27T09:22:07.496338+00:00", "title": "Improper Escaping of User Input in Spring AI RediSearch Filter Enables Injection", "updated": "2026-04-17T11:30:16.995930+00:00", "vendors": ["spring", "spring$PRODUCT$spring"], "weaknesses": ["CWE-74", "CWE-20"]}