Server-Side Request Forgery Vulnerability in Spring AI's Bedrock Proxy Chat Model
CVE-2026-22742

8.6HIGH

Key Information:

Vendor

Spring

Status
Spring Ai
Vendor
CVE Published:
27 March 2026

What is CVE-2026-22742?

The spring-ai-bedrock-converse from Spring AI contains a vulnerability that allows an attacker to manipulate server requests through insufficiently validated user-supplied media URLs. This SSRF flaw can enable attackers to direct the server to make requests to malicious internal or external resources, potentially compromising sensitive data or network integrity. Users are recommended to upgrade to secure versions to mitigate risks associated with this exposure.

Affected Version(s)

Spring AI 1.0.0 < 1.0.5

Spring AI 1.1.0 < 1.1.4

References

https://spring.io/security/cve-2026-22742

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.