In Spring AI's Semantic Cache support, the mechanism that uses a context hash to isolate cached responses between different system prompts is flawed. Specifically, the context hash can allow cached responses to be shared across unrelated contexts, leading to exposure of resources to the wrong sphere. This affects Spring AI version 2.0.0. The CVSS v3.1 score is 4.2, indicating a medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and low confidentiality and integrity impacts.

The vulnerability could lead to unintended sharing of cached responses between unrelated contexts, potentially exposing sensitive information to unauthorized contexts. The impact is limited to confidentiality and integrity with low severity, and there is no impact on availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is currently documented. Users should monitor vendor communications for updates and consider restricting access to affected versions until a fix is available.