Path traversal in Spring AI - CVE-2026-59294
Published: August 31, 2026
Vulnerability identifier: #VU146385
CSH Severity: Low
CVSS v4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-59294
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to write arbitrary files.
The vulnerability exists due to path traversal in ResourceCacheService.getCacheName() when handling model or tokenizer URIs from a less-trusted source. A remote user can supply a URI with a crafted fragment to write arbitrary files.
Exploitation requires an application to pass model or tokenizer URIs from a less-trusted source, such as tenant configuration, an admin UI, or an external catalogue, to TransformersEmbeddingModel.setModelResource() or setTokenizerResource().
Affected software
Spring AI
Library Support for Spring
Library Support for Spring
How to mitigate CVE-2026-59294
Install security update from vendor's website.
Spring AI - addressed in versions 1.0.10, 1.1.9, 2.0.0.1, 2.0.1
Library Support for Spring - update to 3.5.19
Library Support for Spring - update to 3.5.19