Spring Security Advisories

RSS feed

LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API

MEDIUM | MAY 23, 2026 | CVE-2026-41863

Description

Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.

Affected Spring Products and Versions

Spring AI:

  • 1.1.0 - 1.1.6

Affected Spring Products and Versions

Spring AI:

  • 1.1.0 - 1.1.6

Mitigation

Users of affected versions should upgrade to the corresponding fixed version.
Fix versionAvailability
1.1.7OSS

No further mitigation steps are necessary.

References

History

  • 2026-05-23: Initial vulnerability report published.

Reporting a vulnerability

To report a security vulnerability for a project within the Spring portfolio, see the Security Policy

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all