CVE-2026-59308

EUVD-2026-63932
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts.
Affected versions:
Spring AI: 2.0.0
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.2 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 11.82%
Affected Products (NVD)
VendorProductVersion
vmwarespring_ai
2.0.0 ≤
𝑥
< 2.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://spring.io/security/cve-2026-59308