{"uuid": "d4ee14fc-b910-4ef4-8a39-796652b6f9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/338", "content": "CVE-2026-22738\n\nIn Spring AI, a SpEL injection vulnerability exists in\u00a0SimpleVectorStore\u00a0when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code.\u00a0Only applications that use\u00a0SimpleVectorStore\u00a0and pass user-supplied input as a filter expression key are affected.\nThis issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.\n\nGitHub Link:\nhttps://github.com/rockmelodies/CVE-2026-22738", "creation_timestamp": "2026-08-28T00:00:30.303683Z"}