Spring Security Advisories

RSS feed

Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore

HIGH | MARCH 26, 2026 | CVE-2026-22743

Description

spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.<key>`) after stripping only double quotes, without escaping embedded backticks.

Affected Spring Products and Versions

Spring AI:

  • 1.1.0 - 1.1.3
  • 1.0.0 - 1.0.4

Mitigation

Users of affected versions should upgrade to the corresponding fixed version.
Fix versionAvailability
1.1.4OSS
1.0.5OSS

No further mitigation steps are necessary.

Credit

Identified by Cantina's AppSec agent, Apex (https://www.cantina.security/)

References

History

  • 2026-03-26: Initial vulnerability report published.

Reporting a vulnerability

To report a security vulnerability for a project within the Spring portfolio, see the Security Policy

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all