SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
Title source: cnaExploitation Summary
EIP tracks 4 public exploits for CVE-2026-22738. PoCs published by adminlove520, XZ1r0, rockmelodies.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-22738, demonstrating unauthenticated remote code execution via SpEL injection in Spring AI SimpleVectorStore. The exploit includes detailed technical analysis, a Dockerized vulnerable environment, and a Python script to trigger the vulnerability.
Description
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
Exploits (4)
This repository contains a functional exploit for CVE-2026-22738, demonstrating unauthenticated remote code execution via SpEL injection in Spring AI SimpleVectorStore. The exploit includes detailed technical analysis, a Dockerized vulnerable environment, and a Python script to trigger the vulnerability.
This repository contains a functional exploit for CVE-2026-22738, a SpEL injection vulnerability in Spring AI SimpleVectorStore. The exploit demonstrates unauthenticated remote code execution by injecting malicious SpEL expressions into the filterKey parameter, bypassing input validation to execute arbitrary commands on the target system.
The repository contains only a minimal README with the CVE title and no exploit code, technical details, or additional content. It appears to be a placeholder or incomplete submission.
This repository contains a functional exploit for CVE-2026-22738, demonstrating unauthenticated remote code execution via SpEL injection in Spring AI's SimpleVectorStore. The exploit includes a Dockerized vulnerable environment and a Python script to trigger the vulnerability, confirming RCE via the EL1030E error indicator.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H