VMware Cloud Foundation Operations contains multiple stored cross-site scripting (XSS) vulnerabilities. An attacker with privileges to create policies, views, or text widgets could inject malicious scripts that execute administrative actions within the application. This vulnerability affects certain 5.x, 9.0.x.x, and 9.1.x.x versions of VMware VCF operations. The CVSS score is 8.0, indicating a high severity risk. No official patch or remediation guidance is currently provided by the vendor. No known exploits in the wild have been reported.
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed.
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
* the application is using Spring MVC or Spring WebFlux
* the application is serving static resources from the file system
* the application is running on a Windows platform
When all the conditions above are met, the attacker can send malicious requests that are slow to resolve and that can keep HTTP connections in use. This can cause a Denial of Service on the application.
Spring MVC and WebFlux applications using Spring Framework versions 5.3.0, 6.1.0, 6.2.0, and 7.0.0 are vulnerable to cache poisoning when resolving static resources with resource chain support and caching enabled. An attacker can poison the resource cache with incorrectly encoded resources, potentially causing denial of service by breaking the front-end application for clients. This vulnerability requires specific configuration conditions and user interaction. The CVSS score is low, indicating limited impact.
CVE-2026-22740 is a medium severity vulnerability in VMware Spring Framework affecting certain versions. It involves uncontrolled resource consumption due to temporary files created by WebFlux server applications processing multipart requests. These temp files, created for parts larger than 10 KB, may not be deleted after request completion, potentially allowing attackers to exhaust disk space. The vulnerability affects specific versions including 5.3.0, 6.1.0, 6.2.0, and 7.0.0. No official patch or remediation guidance is currently available.
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input as a conversationId are affected.
CVE-2026-22750 is a high-severity vulnerability in VMware Spring Cloud Gateway version 4.2.0 where the configuration property spring.ssl.bundle is silently ignored, causing the default SSL configuration to be used instead. This misconfiguration can lead to a loss of intended security controls related to SSL, potentially allowing an attacker to interfere with the integrity of the system. The 4.2.x branch is no longer supported in open source, and users are advised to upgrade to newer supported versions such as 5.0.
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.
This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP Headers:
: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted filter expressions. User-controlled input passed to FilterExpressionBuilder is concatenated into JSONPath queries without proper escaping, enabling attackers to inject arbitrary JSONPath logic and access unauthorized documents.
This vulnerability affects applications using vector stores that extend AbstractFilterExpressionConverter for multi-tenant isolation, role-based access control, or document filtering based on metadata.
The vulnerability occurs when user-supplied values in filter expressions are not escaped before being inserted into JSONPath queries. Special characters like ", ||, and && are passed through unescaped, allowing injection of arbitrary JSONPath logic that can alter the intended query semantics.
CVE-2026-22730 is a critical SQL injection vulnerability in VMware Spring AI versions 1.0.x and 1.1.x, specifically in the MariaDBFilterExpressionConverter component. This flaw arises from missing input sanitization, allowing attackers with limited privileges to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability has a high CVSS score of 8.8, indicating severe impact on confidentiality, integrity, and availability without requiring user interaction. Although no known exploits are currently in the wild, the ease of exploitation and potential damage make it a significant threat. Organizations using affected Spring AI versions should prioritize patching once available and implement strict input validation and database access restrictions.
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.
Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate certain Workstation processes.
A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'
VMWare Workstation and Fusion contain a logic flaw in the management of network packets.
Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.
Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 .
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.
To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// .
VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress.
To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001
Workarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001
A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory. This vulnerability appears to be susceptible on Windows OS only.
