Spring AI FilterExpressionConverter Injection Vulnerability

A vulnerability exists in Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4, where certain FilterExpressionConverter implementations fail to properly escape keys and values in filter expressions. This oversight allows for the manipulation of queries directed towards specific vector store query languages. The vulnerability affects applications that utilize VectorStore implementations and incorporate user-supplied input as a filter expression.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of vector store queries, potentially allowing for injection attacks or manipulation of query results.

Remediation

Users should upgrade to Spring AI version 1.0.6 or 1.1.5, depending on their current version.