Spring AI versions 1.0.0 to 1.0.5 and 1.1.0 to 1.1.4 contain a vulnerability (CWE-94) where FilterExpressionConverter implementations fail to properly escape keys and values when converting filter expressions to vector store query languages. This flaw allows attackers to alter queries by injecting or manipulating code within the query generation process. The vulnerability is rated high severity with a CVSS 3.1 score of 8.6 (network attack vector, low attack complexity, no privileges or user interaction required, impacting confidentiality, integrity, and availability). The issue is fixed in versions 1.0.6 and 1.1.5. No official vendor advisory or patch links are provided in the data, and no known exploits have been observed.

Successful exploitation could allow an attacker to alter vector store queries by injecting or manipulating code within the query generation process. This can lead to unauthorized disclosure of information (confidentiality impact), modification of query results (integrity impact), and potential denial of service or disruption (availability impact). The CVSS score of 8.6 reflects these significant impacts. No known exploits in the wild have been reported.

Upgrade affected Spring AI versions to 1.0.6 or 1.1.5 or later, where the vulnerability is fixed. Since no vendor advisory or patch links are provided, users should verify the availability of these fixed versions from official Spring project sources before upgrading. No other mitigation or temporary fixes are indicated. Patch status is not yet confirmed by vendor advisory; check official Spring AI release notes for confirmation.