CVE-2026-47835

Published Jun 15, 2026

Last updated 4 months ago

CVSS high 8.6
Cloud

Overview

Description
In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).
Source
security@vmware.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.6
Impact score
4.7
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Severity
HIGH

Weaknesses

security@vmware.com
CWE-943

Social media

Hype score
Not currently trending

Related CVEs

  1. Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.•CVE-2026-110447
  2. Ahsay AhsayCBS Improper Authentication Vulnerability•CVE-2026-105133
  3. Ahsay AhsayCBS Command Injection Vulnerability•CVE-2026-105134
  4. Citrix NetScaler Improper Input Validation Vulnerability•CVE-2026-88771
  5. Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability•CVE-2026-88772

References

Sources include official advisories and independent security research.