CVE-2026-22729

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-22729
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22729.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-22729
Aliases
Published
2026-03-18T07:39:56.739Z
Modified
2026-07-08T08:09:13.753678284Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
Summary
CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Details

A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted filter expressions. User-controlled input passed to FilterExpressionBuilder is concatenated into JSONPath queries without proper escaping, enabling attackers to inject arbitrary JSONPath logic and access unauthorized documents.

This vulnerability affects applications using vector stores that extend AbstractFilterExpressionConverter for multi-tenant isolation, role-based access control, or document filtering based on metadata.

The vulnerability occurs when user-supplied values in filter expressions are not escaped before being inserted into JSONPath queries. Special characters like ", ||, and && are passed through unescaped, allowing injection of arbitrary JSONPath logic that can alter the intended query semantics.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.0.x"
                },
                {
                    "fixed": "1.0.4"
                },
                {
                    "introduced": "1.1.x"
                },
                {
                    "fixed": "1.1.3"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22729.json",
    "cna_assigner": "vmware"
}
References

Affected packages

Git / github.com/spring-projects/spring-ai

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-ai
Events
Introduced
fcd2803f36f35939c20ed152c9c1b0863fa35dcf
Fixed
f1f6584d4a85c586c63724918695003cb4e0213a
Introduced
fa4c61eabeba0a69147b3c00a3b50380c1f25a75
Fixed
7bc46b52a8f8528d5be5fe6b51ce25c9a783964a
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "fixed": "1.0.4"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "fixed": "1.1.3"
        }
    ]
}

Affected versions

v1.*
v1.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22729.json"