Detections
Analytics

SCA: security update for org.springframework.ai:spring-ai-vector-store (GHSA-rp9g-qx29-88cp)

high Tenable Cloud Security Plugin ID 438992

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated
 users to bypass metadata-based access controls through crafted filter expressions. User-controlled input
 passed to FilterExpressionBuilder is concatenated into JSONPath queries without proper escaping, enabling
 attackers to inject arbitrary JSONPath logic and access unauthorized documents. This vulnerability affects
 applications using vector stores that extend AbstractFilterExpressionConverter for multi-tenant isolation,
 role-based access control, or document filtering based on metadata. The vulnerability occurs when user-
 supplied values in filter expressions are not escaped before being inserted into JSONPath queries. Special
 characters like ", ||, and && are passed through unescaped, allowing injection of arbitrary JSONPath logic
 that can alter the intended query semantics. (CVE-2026-22729)

Solution

Update the org.springframework.ai:spring-ai-vector-store library and its related packages to version 1.0.4 or later.

See Also

https://github.com/advisories/GHSA-rp9g-qx29-88cp

Plugin Details

Severity: High

ID: 438992

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 3/19/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.3

Percentile: 51.27

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-22729

CVSS v3

Risk Factor: High

Base Score: 8.6

Temporal Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/18/2026

Vulnerability Publication Date: 3/18/2026

Reference Information

CVE: CVE-2026-22729

cwe: CWE-917