Spring AI versions 1.0.0 through latest 1.0.x and 1.1.0 through latest 1.1.x contain a vulnerability (CVE-2026-41705) in the MilvusVectorStore#doDelete(List) implementation. The vulnerability arises from improper neutralization of special elements in an expression language statement, specifically filter-expression injection via unsanitized document IDs. This can allow an attacker to influence the expression evaluation, potentially leading to unauthorized data exposure. The CVSS 3.1 base score is 8.6, reflecting a network attack vector with low attack complexity, no privileges or user interaction required, and high confidentiality impact with limited integrity and availability impacts. The vendor recommends upgrading to versions 1.0.7 or greater for the 1.0.x branch and 1.1.6 or greater for the 1.1.x branch to remediate the vulnerability.

An attacker can exploit this vulnerability remotely without authentication or user interaction to inject malicious expressions via unsanitized document IDs. This can lead to high confidentiality impact by potentially exposing sensitive data. Integrity and availability impacts are limited but present. No known exploits in the wild have been reported to date.

Upgrade affected Spring AI versions to 1.0.7 or greater for the 1.0.x branch and 1.1.6 or greater for the 1.1.x branch as these versions contain fixes for this vulnerability. Patch status is not explicitly confirmed in the vendor advisory, so users should consult official Spring AI advisories for the latest remediation guidance. No alternative mitigations or workarounds are indicated.