CVEvulnerability

CVE-2026-59318

9.8 CRITICAL Published 2026-08-21 Modified 2026-10-15 Official page ↗
Status
Analyzed
Published
2026-08-21
Last modified
2026-10-15
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-863

Description

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation. Affected versions: Spring AI: 2.0.0 Spring AI: 1.1.0 through 1.1.8 Spring AI: 1.0.0 through 1.0.9

Affected configurations

• vmware spring ai (>= 1.0.0 < 1.0.10) • vmware spring ai (>= 1.1.0 < 1.1.9) • vmware spring ai (>= 2.0.0 < 2.0.1)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References