Spring AI SpEL Injection Vulnerability in SimpleVectorStore Allows Remote Code Execution

A SpEL injection vulnerability has been identified in Spring AI versions 1.0.0 prior to 1.0.5 and 1.1.0 prior to 1.1.4. The issue arises in the SimpleVectorStore component when user-supplied values are used as filter expression keys. This vulnerability could be exploited by a malicious actor to execute arbitrary code, but only in applications that utilize SimpleVectorStore and pass user input as filter keys.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where the affected Spring AI application is running.

Remediation

Users should upgrade to Spring AI version 1.0.5 or 1.1.4, depending on their current version.