internet-facing-service-vulnerabilityopen-source-dependency-vulnerabilitywidely-deployed-product-advisory

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

Vulnerability Disclosure · 3 sources · Updated 4mo ago · First seen Mar 26, 2026

The Canadian Centre for Cyber Security issued advisory AV26-288 warning that multiple vulnerabilities disclosed by Spring affect Spring Cloud Config and Spring AI, including server-side request forgery (SSRF), unintended file access, query injection, and a SpEL injection that can lead to remote code execution (RCE). The notice says the issues were disclosed by Spring between March 23 and 26 and urged organizations to review the vendor advisories and assess exposure in affected deployments.

Affected versions include Spring Cloud Config releases prior to 3.1.3, 4.1.9, 4.2.6, 4.3.2, and 5.0.2, along with Spring AI versions prior to 1.0.5 and 1.1.4. The Cyber Centre advised administrators and users to apply the relevant updates to reduce the risk of exploitation against exposed services and vulnerable application environments.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

5 events · Mar 19, 2026 – Jun 29, 2026

Jun 29, 20264mo ago
F5 publishes advisory for Spring AI vulnerability CVE-2026-22738
On 2026-06-29, F5 published product advisory K000161950 بشأن Spring AI vulnerability CVE-2026-22738, indicating downstream vendor impact or guidance related to the flaw. This is a distinct vendor response not captured in the existing timeline.
Spring AI vulnerability CVE-2026-22738
Mar 26, 20267mo ago
Canadian Centre for Cyber Security issues advisory AV26-288
On March 26, 2026, the Canadian Centre for Cyber Security published advisory AV26-288 summarizing the Spring vulnerabilities and urging users and administrators to review the vendor advisories and apply updates.
Mar 26, 20267mo ago
Fixed versions released for affected Spring products
Spring made patched versions available for the affected products, including Spring Cloud Config 3.1.3, 4.1.9, 4.2.6, 4.3.2, and 5.0.2, as well as Spring AI 1.0.5 and 1.1.4.
Mar 23, 20268mo ago
Spring discloses multiple vulnerabilities in Spring Cloud Config and Spring AI
Between March 23 and March 26, 2026, Spring disclosed multiple vulnerabilities affecting Spring Cloud Config and Spring AI, including SSRF, unintended file access, query injection, and a SpEL injection that could lead to remote code execution.
Mar 19, 20268mo ago
Technical details published for CVE-2026-22730 in Spring AI MariaDB Vector Store
On 2026-03-19, a security blog published details about CVE-2026-22730, describing a SQL injection vulnerability affecting Spring AI's MariaDB Vector Store component. This predates Spring's broader March 23-26 vulnerability disclosures already captured in the timeline.
CVE-2026-22730 SQL Injection in Spring AI's MariaDB Vector Store

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

2 linked

Spring Cloud Config Server Profile Parameter Path Traversal and SSRF (CVE-2026-22739)Spring AI SimpleVectorStore SpEL Injection RCE (CVE-2026-22738)

Affected products

1 linked

Spring Ai

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

F5 Product AdvisoriesNews · Jun 29, 2026

Spring AI vulnerability CVE-2026-22738Open source ↗

Ca CcsNews · Mar 26, 2026

Spring security advisory (AV26-288) - Canadian Centre for Cyber SecurityOpen source ↗

Securelayer7 BlogNews · Mar 19, 2026

CVE-2026-22730 SQL Injection in Spring AI's MariaDB Vector StoreOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

internet-facing-service-vulnerabilityopen-source-dependency-vulnerabilitywidely-deployed-product-advisory

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

Vulnerability Disclosure · 3 sources · Updated 4mo ago · First seen Mar 26, 2026

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

5 events · Mar 19, 2026 – Jun 29, 2026

Jun 29, 20264mo ago
F5 publishes advisory for Spring AI vulnerability CVE-2026-22738
On 2026-06-29, F5 published product advisory K000161950 بشأن Spring AI vulnerability CVE-2026-22738, indicating downstream vendor impact or guidance related to the flaw. This is a distinct vendor response not captured in the existing timeline.
Spring AI vulnerability CVE-2026-22738
Mar 26, 20267mo ago
Canadian Centre for Cyber Security issues advisory AV26-288
On March 26, 2026, the Canadian Centre for Cyber Security published advisory AV26-288 summarizing the Spring vulnerabilities and urging users and administrators to review the vendor advisories and apply updates.
Mar 26, 20267mo ago
Fixed versions released for affected Spring products
Spring made patched versions available for the affected products, including Spring Cloud Config 3.1.3, 4.1.9, 4.2.6, 4.3.2, and 5.0.2, as well as Spring AI 1.0.5 and 1.1.4.
Mar 23, 20268mo ago
Spring discloses multiple vulnerabilities in Spring Cloud Config and Spring AI
Between March 23 and March 26, 2026, Spring disclosed multiple vulnerabilities affecting Spring Cloud Config and Spring AI, including SSRF, unintended file access, query injection, and a SpEL injection that could lead to remote code execution.
Mar 19, 20268mo ago
Technical details published for CVE-2026-22730 in Spring AI MariaDB Vector Store
On 2026-03-19, a security blog published details about CVE-2026-22730, describing a SQL injection vulnerability affecting Spring AI's MariaDB Vector Store component. This predates Spring's broader March 23-26 vulnerability disclosures already captured in the timeline.
CVE-2026-22730 SQL Injection in Spring AI's MariaDB Vector Store

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

2 linked

Spring Cloud Config Server Profile Parameter Path Traversal and SSRF (CVE-2026-22739)Spring AI SimpleVectorStore SpEL Injection RCE (CVE-2026-22738)

Affected products

1 linked

Spring Ai

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

F5 Product AdvisoriesNews · Jun 29, 2026

Spring AI vulnerability CVE-2026-22738Open source ↗

Ca CcsNews · Mar 26, 2026

Spring security advisory (AV26-288) - Canadian Centre for Cyber SecurityOpen source ↗

Securelayer7 BlogNews · Mar 19, 2026

CVE-2026-22730 SQL Injection in Spring AI's MariaDB Vector StoreOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

How this story unfolded

F5 publishes advisory for Spring AI vulnerability CVE-2026-22738

Canadian Centre for Cyber Security issues advisory AV26-288

Fixed versions released for affected Spring products

Spring discloses multiple vulnerabilities in Spring Cloud Config and Spring AI

Technical details published for CVE-2026-22730 in Spring AI MariaDB Vector Store

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Spring Issues Security Updates Across Boot, Framework, Security, and Gateway

Spring discloses Spring AI injection flaw and Spring gRPC security context issues

Spring Tools Flaws Expose Developers to RCE, Open Debug Ports, and Weak Secrets

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

How this story unfolded

F5 publishes advisory for Spring AI vulnerability CVE-2026-22738

Canadian Centre for Cyber Security issues advisory AV26-288

Fixed versions released for affected Spring products

Spring discloses multiple vulnerabilities in Spring Cloud Config and Spring AI

Technical details published for CVE-2026-22730 in Spring AI MariaDB Vector Store

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Spring Issues Security Updates Across Boot, Framework, Security, and Gateway

Spring discloses Spring AI injection flaw and Spring gRPC security context issues

Spring Tools Flaws Expose Developers to RCE, Open Debug Ports, and Weak Secrets