Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()

HIGH 8.8CVE-2026-40978 · GHSA-63c8-m9m2-cvr3 · Published 28/04/2026 · updated 26/10/2026

In short

CVE-2026-40978 is a HIGH (CVSS 8.8) vulnerability affecting org.springframework.ai:spring-ai-azure-cosmos-db-store, spring ai (vmware).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.3% of all vulnerabilities.
Fix: update to 1.0.6, 1.1.5 or later.

Package	Affected versions	Patched versions
org.springframework.ai:spring-ai-azure-cosmos-db-store Maven	`≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.5`	`1.0.61.1.5`
spring ai vmware	`≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.5`	`1.0.61.1.5`

Description

SQL injection vulnerability in Spring AI's CosmosDBVectorStore allows attackers to execute arbitrary SQL queries via crafted document IDs.

Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5).

NVD description

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

References

nvd.nist.gov/vuln/detail/CVE-2026-40978 · ADVISORY
spring-projects/spring-ai · PACKAGE
spring.io/security/cve-2026-40978 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free