Spring AI versions 1.1.0 through 1.1.x contain a CWE-22 path traversal vulnerability due to unsanitized LLM-influenced filenames used in Path.resolve before writing files to disk. This improper limitation of pathname allows a malicious user with limited privileges to write files outside the intended target directory, including restricted directories. The vulnerability has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official remediation level has been published by the vendor as of the publication date.

An attacker with limited privileges can exploit this vulnerability to write or overwrite files outside the designated directory, potentially modifying critical files or placing malicious files in restricted locations. This impacts the integrity of the system but does not affect confidentiality or availability. There are no known active exploits reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting permissions to limit the ability of the application to write files outside intended directories and monitor for unusual file system changes related to Spring AI. Avoid running Spring AI with elevated privileges where possible.