CVE-2026-40966

{
  "id": "CVE-2026-40966",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-28T08:16:01.283",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected."
    },
    {
      "lang": "es",
      "value": "En Spring AI, un atacante puede eludir el aislamiento de conversaciones y exfiltrar memoria sensible de los historiales de chat de otros usuarios, incluyendo secretos y credenciales, inyectando lógica de filtro a través de conversationId. Solo las aplicaciones que utilizan VectorStoreChatMemoryAdvisor y pasan entrada proporcionada por el usuario como un conversationId se ven afectadas."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "Spring AI",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.0.0",
              "lessThan": "1.0.6",
              "versionType": "OSS",
              "status": "affected"
            },
            {
              "version": "1.1.0",
              "lessThan": "1.1.5",
              "versionType": "oss",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-28T13:18:57.595874Z",
          "id": "CVE-2026-40966",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.0.0",
              "versionEndExcluding": "1.0.6",
              "matchCriteriaId": "1CD6DC44-CDE8-47E4-A788-6D8AE716396F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.1.0",
              "versionEndExcluding": "1.1.5",
              "matchCriteriaId": "5013645B-3914-4A40-8D42-CB47344963A7"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?version=3.1&vector=AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "source": "[email protected]",
      "tags": [
        "US Government Resource"
      ]
    },
    {
      "url": "https://spring.io/security/cve-2026-40966",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}