The vulnerability exists in the RedisFilterExpressionConverter of spring-ai-redis-store, where the stringValue() method inserts user-controlled input directly into the @field:{VALUE} RediSearch TAG block without escaping special characters. This improper input sanitization can cause issues related to CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component). Affected versions include Spring AI 1.0.0 up to but not including 1.0.5, and 1.1.0 up to but not including 1.1.4. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to confidentiality.

The vulnerability allows an attacker to inject specially crafted strings into RediSearch TAG queries, potentially leading to unauthorized data exposure or information leakage due to improper escaping of user input. The CVSS score of 7.5 reflects a high confidentiality impact without affecting integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Spring's advisories for updates. Until a fix is available, avoid passing untrusted user input directly as TAG filter values or implement custom input validation and escaping to mitigate injection risks.