GitHub Advisoryadvisory · Maven

GHSA-cmwh-w62w-r2mf Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

HIGH Published 2026-06-15 Modified 2026-08-26 Official page ↗
Aliases
CVE-2026-47835
Ecosystem
Maven
Packages
org.springframework.ai:spring-ai-opensearch-store, org.springframework.ai:spring-ai-elasticsearch-store, org.springframework.ai:spring-ai-gemfire-store
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Weaknesses
CWE-943
Reviewed
2026-08-26

Affected packages

• Maven org.springframework.ai:spring-ai-opensearch-store: >= 1.0.0, < 1.0.9 → fixed in 1.0.9 • Maven org.springframework.ai:spring-ai-opensearch-store: >= 1.1.0, < 1.1.8 → fixed in 1.1.8 • Maven org.springframework.ai:spring-ai-elasticsearch-store: >= 1.0.0, < 1.0.9 → fixed in 1.0.9 • Maven org.springframework.ai:spring-ai-elasticsearch-store: >= 1.1.0, < 1.1.8 → fixed in 1.1.8 • Maven org.springframework.ai:spring-ai-gemfire-store: >= 1.0.0, < 1.0.9 → fixed in 1.0.9 • Maven org.springframework.ai:spring-ai-gemfire-store: >= 1.1.0, < 1.1.8 → fixed in 1.1.8

Description

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).

Related

Alias · CVE (1)

  • CVE-2026-47835 In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and… vulnerability

Weakness · CWE (1)

  • CWE-943 Improper Neutralization of Special Elements in Data Query Logic weakness

References