CVE-2026-41863 is a CWE-22 path traversal vulnerability affecting Spring AI version 1.1.0. The issue stems from the use of unsanitized filenames influenced by large language models (LLMs) in the Path.resolve method prior to file write operations. This flaw allows a malicious user with limited privileges to write files outside the intended directory, including restricted system directories, potentially leading to unauthorized file manipulation. The vulnerability has a CVSS 3.1 base score of 6.5 (medium severity), with attack vector network, low attack complexity, requiring privileges, no user interaction, and impact limited to integrity. There is no known official patch or vendor remediation guidance at this time.

An attacker with privileges to influence filenames can exploit this vulnerability to write files outside the intended directory, including restricted directories. This can lead to unauthorized modification or creation of files, potentially impacting system integrity. Confidentiality and availability are not affected according to the CVSS vector. No known exploits are reported in the wild.

No official patch or remediation guidance is currently available from the vendor. Users should monitor the vendor's advisory channels for updates. Until a fix is released, avoid using vulnerable versions in untrusted environments or restrict access to the functionality that processes filenames influenced by LLMs to trusted users only.