CVE-2026-22744General(vmware / spring_ai)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch vmware spring_ai systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

vmware CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://spring.io/security/cve-2026-22744

Weakness type (CWE)

CWE-74

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

spring_ai

Threat summary

Patch or workaround signal is available
5 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
General: 3 classified signals
Disclosure: 2 classified signals
Peaked 3d ago at 2 mentions (2026-03-27); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

vmware

Products

spring_ai

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

General

360.0%

Disclosure

240.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-27	2	General2
2026-03-30	1	Disclosure1
2026-04-01	1	General1
2026-04-06	1	Disclosure1

Full discourse5 posts

V4bel@v4bel190d
General
Here are some Spring vulns (AI slops) I found while casually testing my AI auditing pipeline: CVE-2026-22738: Spring AI SimpleVectorStore SpEL Injection RCE CVE-2026-22742: Spring AI Bedrock SSRF via Unvalidated Media URL CVE-2026-22744: Spring AI RedisVectorStore TAG Filter Injection CVE-2026-22739: Spring Cloud Config Server Profile Path Traversal & SSRF CVE-2026-... Just RCE. Nothing technically impressive. Took me two days 😅
Post summary
The author casually lists several Spring AI-related CVEs, noting their types (RCE, SSRF, injection) but provides no PoC, exploit code, or patch details.
04046255.0K
1.5K followersView on X
CCB Alert@CCBalert192d
Disclosure
Warning: High #SSRF & Injection vulnerabilities in #SpringAI. CVE-2026-22742, CVE-2026-22743, CVE-2026-22744 CVSS: 8.6. These CVEs can lead to unintended server requests and database access. #Patch #Patch #Patch
Post summary
The post announces three high‑severity SSRF and injection CVEs in SpringAI, detailing potential server requests and database access, and urges patching.
01001224
7.2K followersView on X
CERT-PY@CERTpy185d
Disclosure
⚠️ Vulnerabilidades en productos Spring ❗ CVE-2026-22744 ❗ CVE-2026-22742 ❗ CVE-2026-22738 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-spring-3/ https://t.co/RfKNkkZsdP
Post summary
The post announces three Spring Product CVEs and links to a government CERT page for details, signaling a disclosure of new vulnerabilities without referencing PoCs, exploits, or patches.
00010161
6.6K followersView on X
CVE@CVEnew195d
General
CVE-2026-22744 In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value… https://www.cve.org/CVERecord?id=CVE-2026-22744
Post summary
The post outlines a technical flaw in spring‑ai‑redis‑store’s RedisFilterExpressionConverter, but provides no evidence of exploitation, PoC, or mitigation, positioning it as a general vulnerability notice.
0000066
56.9K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash195d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-22744 - Spring AI Redis Store Unescaped User-Controlled Input in TAG Field Intel Report: https://ift.tt/zm4RIta
Post summary
The alert references CVE-2026-22744 and provides a brief technical description but lacks evidence of PoC, exploit code, active exploitation, or patches.
0000027
284 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	vmware	spring_ai	-	-	-

Explore more

Back to dashboard vmware CVEs spring_ai vulnerabilities

What researchers are saying

CVE-2026-22744

V4bel[verified]@v4belGeneral

The author casually lists several Spring AI-related CVEs, noting their types (RCE, SSRF, injection) but provides no PoC, exploit code, or patch details.

CCB Alert@CCBalertDisclosure

The post announces three high‑severity SSRF and injection CVEs in SpringAI, detailing potential server requests and database access, and urges patching.

CERT-PY@CERTpyDisclosure

The post announces three Spring Product CVEs and links to a government CERT page for details, signaling a disclosure of new vulnerabilities without referencing PoCs, exploits, or patches.

CVE@CVEnewGeneral

The post outlines a technical flaw in spring‑ai‑redis‑store’s RedisFilterExpressionConverter, but provides no evidence of exploitation, PoC, or mitigation, positioning it as a general vulnerability notice.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The alert references CVE-2026-22744 and provides a brief technical description but lacks evidence of PoC, exploit code, active exploitation, or patches.