The vulnerability identified as CVE-2026-47835 involves improper neutralization of special elements in data query logic (CWE-943) within Spring AI Vector Stores. Specifically, special characters can be used to manipulate query execution in the affected vector store components for Elasticsearch, OpenSearch, and GemFire VectorDB. This can lead to unauthorized query execution, potentially exposing or altering sensitive data. The affected versions include Spring AI 1.0.0 through 1.0.x and 1.1.0 through 1.1.x. Fixes have been released in versions 1.0.9 and 1.1.8. The CVSS v3.1 base score is 8.6, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact with limited integrity and availability impact.

Successful exploitation could allow an unauthenticated attacker to execute arbitrary queries against Elasticsearch, OpenSearch, or GemFire VectorDB through the Spring AI Vector Stores. This can lead to high confidentiality impact by exposing sensitive data, with additional limited impacts on integrity and availability. There are no known exploits in the wild currently.

Fixes are available in Spring AI versions 1.0.9 and 1.1.8. Users should upgrade affected components (spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store) to these versions or later to remediate the vulnerability. Patch status is not explicitly confirmed in the vendor advisory, but the presence of fixed versions indicates official fixes are available. No alternative mitigations are specified.