Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreSpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
Description
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code.
Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected.
Affected Spring Products and Versions
Spring AI:
- 1.1.0 - 1.1.3
- 1.0.0 - 1.0.4
Mitigation
Users of affected versions should upgrade to the corresponding fixed version.
| Fix version | Availability |
|---|---|
| 1.1.4 | OSS |
| 1.0.5 | OSS |
No further mitigation steps are necessary.
Credit
The issue was reported responsibly by
- Hyunwoo Kim (@V4bel)
- Cantina's AppSec agent, Apex (https://www.cantina.security/)
History
- 2026-03-26: Initial vulnerability report published.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
Get support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all