Deterministic Cache Path Vulnerability in Spring AI by Pivotal Software
CVE-2026-47852

7.5HIGH

Key Information:

Vendor

Spring

Status
Spring Ai
Vendor
CVE Published:
26 August 2026

What is CVE-2026-47852?

A local attacker on a multi-user host can exploit a vulnerability in Spring AI by pre-creating a deterministic cache path. This allows them to plant a malicious ONNX model file, which could affect how the application processes model files, leading to potential exploitation of the system.

Affected Version(s)

Spring AI 2.0.0

Spring AI 1.1.0 <= 1.1.8

Spring AI 1.0.0 <= 1.0.9

References

https://spring.io/security/cve-2026-47852

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.