CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-22730

A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 5.5%

CVSS Severity

CVSS v3 Score 8.8

References

https://spring.io/security/cve-2026-22730

Products affected by CVE-2026-22730

Vmware » Spring Ai » Version: 1.0.0

cpe:2.3:a:vmware:spring_ai:1.0.0
Vmware » Spring Ai » Version: 1.0.1

cpe:2.3:a:vmware:spring_ai:1.0.1
Vmware » Spring Ai » Version: 1.0.2

cpe:2.3:a:vmware:spring_ai:1.0.2
Vmware » Spring Ai » Version: 1.0.3

cpe:2.3:a:vmware:spring_ai:1.0.3
Vmware » Spring Ai » Version: 1.1.0

cpe:2.3:a:vmware:spring_ai:1.1.0
Vmware » Spring Ai » Version: 1.1.1

cpe:2.3:a:vmware:spring_ai:1.1.1
Vmware » Spring Ai » Version: 1.1.2

cpe:2.3:a:vmware:spring_ai:1.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-22730

Products

Pricing

Contact Us