imPC@ndo IT

Tracker / CVE-2026-41713

CVE-2026-41713

High 8.2

A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.

Affected products and versions

vmware spring_ai · 1.0.0 → 1.0.7
vmware spring_ai · 1.1.0 → 1.1.6

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References