CVE-2026-59294: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Spring Spring AI

The vulnerability in Spring AI's ResourceCacheService.getCacheName() method involves improper limitation of a pathname to a restricted directory (CWE-22). The method builds an on-disk filename by directly appending the URI fragment without removing path traversal characters such as '..' or path separators. This filename is then used to create a File object under a resource parent folder, where downloaded bytes are written. This flaw can allow an attacker with low privileges to write files outside the intended directory, potentially leading to integrity impacts. Affected versions include 1.0.9 and earlier, 1.1.0 through 1.1.8, and 2.0.0. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

The vulnerability allows an attacker to write files outside the intended directory by exploiting path traversal in the file naming process. This can lead to integrity compromise of the system by overwriting or placing malicious files in unauthorized locations. There is no confidentiality impact reported. Availability impact is low. The attack requires network access and low privileges but has high attack complexity.

No official patch or remediation level is currently provided by the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the vulnerable service and monitor for suspicious file writes related to this component.