Spring AI's FilterExpressionConverter implementations translate filter expression objects into vector store query languages. In affected versions, improper escaping of keys and values allows attackers to alter queries, representing a CWE-94 (Improper Control of Generation of Code) vulnerability. This flaw affects Spring AI versions 1.0.0 to 1.0.5 and 1.1.0 to 1.1.4 and is resolved in versions 1.0.6 and 1.1.5. The CVSS 3.1 base score is 8.2, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability to varying degrees.

The vulnerability allows attackers to manipulate query generation in Spring AI, potentially leading to unauthorized disclosure of information (high confidentiality impact), limited integrity compromise, and some availability disruption. The CVSS score of 8.2 reflects these impacts. There are no known exploits in the wild as of the published date.

Upgrade Spring AI to version 1.0.6 or later, or 1.1.5 or later, where this vulnerability has been fixed. Since no official vendor advisory or patch links were provided, verify the upgrade path with the official Spring project resources to ensure remediation. Patch status is not explicitly confirmed in the input data but the description states the issue is fixed in these versions.