CVE-2026-40966

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-40966
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40966.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-40966
Aliases
Published
2026-04-28T06:42:36.619Z
Modified
2026-07-15T01:49:06.844836023Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration
Details

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected.

Database specific 
{
    "cwe_ids": [
        "CWE-284"
    ],
    "cna_assigner": "vmware",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40966.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.0.0"
                },
                {
                    "fixed": "1.0.6"
                },
                {
                    "introduced": "1.1.0"
                },
                {
                    "fixed": "1.1.5"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/spring-projects/spring-ai

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-ai
Events
Introduced
fcd2803f36f35939c20ed152c9c1b0863fa35dcf
Fixed
057e111a93e61f911427a581207e853cf68085e9
Introduced
fa4c61eabeba0a69147b3c00a3b50380c1f25a75
Fixed
3d662709e1d5041efebf74753a6d119e5196952a
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "fixed": "1.0.6"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "fixed": "1.1.5"
        }
    ]
}

Affected versions

v1.*
v1.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40966.json"