CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Summary
CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter. Affects org.springframework.ai:spring-ai-vector-store across 2 version ranges.
< 1.0.4
>= 1.1.0-M1, < 1.1.3
Fixed in 1.0.4 or 1.1.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Spring AI Vector Store package is designed to facilitate the management and retrieval of vectorized data in AI applications. It provides functionalities such as multi-tenant isolation, role-based access control, and document filtering based on metadata. However, a critical vulnerability has been identified in its AbstractFilterExpressionConverter, which can lead to unauthorized access to sensitive documents.
Vulnerability Detail
A JSONPath injection vulnerability exists in Spring AI's AbstractFilterExpressionConverter, allowing authenticated users to bypass metadata-based access controls through crafted filter expressions. User-controlled input is concatenated into JSONPath queries without proper escaping, enabling attackers to inject arbitrary JSONPath logic. This can lead to unauthorized access to documents, compromising the integrity and confidentiality of the data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.0.41.0.4 -
>= 1.1.0-M1, < 1.1.31.1.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, ensure that user-supplied values in filter expressions are properly escaped before being inserted into JSONPath queries. This can be done by implementing a validation mechanism that sanitizes input to prevent the injection of special characters.
Conclusion
The JSONPath injection vulnerability in Spring AI Vector Stores poses a significant risk to applications relying on this package for access control and document filtering. It is crucial to update to the latest patched versions and implement proper input validation to mitigate potential risks.
See every vulnerability recorded for org.springframework.ai:spring-ai-vector-store →
FAQ
JSONPath injection is a type of attack where an attacker manipulates JSONPath queries to gain unauthorized access to data or alter query behavior.
Applications using the Spring AI Vector Store that extend AbstractFilterExpressionConverter for access control and document filtering are affected.
Attackers could gain unauthorized access to sensitive documents, leading to data breaches and loss of confidentiality.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
The CVSS score of this vulnerability is 8.6, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.springframework.ai:spring-ai-vector-store.
