ai-platform-securityopen-source-dependency-vulnerabilitywidely-deployed-product-advisoryidentity-authentication-vulnerability

Spring discloses Spring AI injection flaw and Spring gRPC security context issues

Emerging Technology Risk · 4 sources · Updated 4mo ago · First seen Apr 28, 2026

Spring published three security advisories covering Spring AI and Spring gRPC, including CVE-2026-40967, a flaw in VectorStore FilterExpressionConverter implementations that can let attackers manipulate generated vector store queries because keys and values are not properly escaped. The issue affects Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4, and is fixed in 1.0.6 and 1.1.5. External vulnerability tracking describes the bug as a high-severity code or query injection risk with CVSS AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L and maps it to CWE-94.

Spring also disclosed two Spring gRPC vulnerabilities: CVE-2026-40968, in which SecurityContext data can leak across requests after an authorization failure, and CVE-2026-40969, where an AuthenticationException message may be reflected back to a remote client. Together, the advisories point to risks of query manipulation, cross-request security context exposure, and unintended error-message disclosure in applications built on affected Spring components.

New surface, new adversariesTrack how attackers are adapting to this technology.

Track this risk

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Apr 27, 2026 – Apr 28, 2026

Apr 28, 20266mo ago
CVE feed republishes technical details for CVE-2026-40967
A CVE tracking source summarized CVE-2026-40967 as an unvalidated filter expression converter vulnerability that can enable query manipulation through improper escaping. The entry reiterated affected and fixed Spring AI versions and linked the disclosure to Spring's advisory.
Apr 28, 20266mo ago
Spring discloses two Spring gRPC vulnerabilities
Spring published advisories for CVE-2026-40968 and CVE-2026-40969 affecting Spring gRPC. The flaws involve SecurityContext leakage across requests on authorization failure and reflection of AuthenticationException messages to remote clients.
Apr 27, 20266mo ago
Spring publishes advisory for CVE-2026-40967 in Spring AI
Spring disclosed CVE-2026-40967, a VectorStore FilterExpression Converter injection flaw in Spring AI. The issue affects versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4, and Spring identified fixes in versions 1.0.6 and 1.1.5.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

3 linked

VectorStore FilterExpression Converter Injection in Spring AI (CVE-2026-40967)Privilege Escalation in Spring gRPC Worker Thread Authentication Context Handling (CVE-2026-40968)AuthenticationException Information Exposure in Spring gRPC (CVE-2026-40969)

Affected products

3 linked

Spring AiSpring AiSpring-Grpc

Do you run this?Follow how adversaries are adapting to this technology, and where it touches your stack today.

Track This Risk

Source coverage

Sources

4 references tracked. Mallory keeps watching after this page renders.

Spring Product AdvisoriesNews · Apr 28, 2026

CVE-2026-40968: Spring gRPC SecurityContext leaks across requests on authorization failureOpen source ↗

Spring Product AdvisoriesNews · Apr 28, 2026

CVE-2026-40969: Spring gRPC AuthenticationException message reflected to remote clientOpen source ↗

Cvefeed High SeverityAdvisories · Apr 28, 2026

CVE-2026-40967 - Spring AI Unvalidated Filter Expression Converter Vulnerability (Code Injection)Open source ↗

Spring Product AdvisoriesNews · Apr 27, 2026

CVE-2026-40967: VectorStore FilterExpression Converter injectionOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Spring discloses Spring AI injection flaw and Spring gRPC security context issues

How this story unfolded

CVE feed republishes technical details for CVE-2026-40967

Spring discloses two Spring gRPC vulnerabilities

Spring publishes advisory for CVE-2026-40967 in Spring AI

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Broad Spring Advisory Wave Exposes 91 CVEs Across Framework and Related Projects

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

Spring Tools Flaws Expose Developers to RCE, Open Debug Ports, and Weak Secrets

Spring discloses Spring AI injection flaw and Spring gRPC security context issues

How this story unfolded

CVE feed republishes technical details for CVE-2026-40967

Spring discloses two Spring gRPC vulnerabilities

Spring publishes advisory for CVE-2026-40967 in Spring AI

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Broad Spring Advisory Wave Exposes 91 CVEs Across Framework and Related Projects

Spring Cloud Config and Spring AI Flaws Expose Systems to RCE and SSRF

Spring Tools Flaws Expose Developers to RCE, Open Debug Ports, and Weak Secrets