This vulnerability in Spring AI arises from improper handling of user-supplied values in the SimpleVectorStore component, specifically when these values are used as filter expression keys in SpEL (Spring Expression Language). This allows an attacker to perform SpEL injection, leading to arbitrary code execution. The issue affects versions 1.0.0 up to but not including 1.0.5, and 1.1.0 up to but not including 1.1.4. The CVSS 3.1 score of 9.8 reflects network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-88 (Improper Neutralization of Argument Delimiters in a Command).

Successful exploitation can lead to arbitrary code execution, compromising the confidentiality, integrity, and availability of affected systems running vulnerable versions of Spring AI that use SimpleVectorStore with user-supplied filter keys. This could allow attackers to fully control the application environment. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using SimpleVectorStore with user-supplied input as filter expression keys or implement strict input validation and sanitization to prevent injection. Monitor vendor channels for updates and apply patches promptly once released.