CVE-2026-47852: CWE-377 Insecure Temporary File in Spring Spring AI

This vulnerability (CVE-2026-47852) affects Spring AI versions 1.0.0 to 1.0.9, 1.1.0 to 1.1.8, and 2.0.0. It involves insecure temporary file creation where a local attacker can predict the cache path used by the application and pre-create it with a malicious ONNX model file. This can lead to integrity violations by substituting legitimate model files with malicious ones. The issue is classified under CWE-377 (Insecure Temporary File). There is no vendor advisory or patch available at this time.

The vulnerability allows a local attacker with access to the multi-user host to compromise the integrity of the Spring AI cache by planting malicious model files. This can lead to the application loading and executing potentially malicious ONNX models, impacting the integrity of the AI processing. There is no indication of confidentiality or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict local access to trusted users only and monitor for unauthorized file creation in the cache directories. Avoid running Spring AI on multi-user hosts where untrusted users have local access.