GHSA-5852-phmh-8fhr

ghsaUSosv

Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

view advisory published 2026-05-12Licence: CC-BY-4.0

A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-41713US	—	0.22% (12th)	—	2026-05-12
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-…

references

External citations — patches, advisories, analysis.

https://github.com/spring-projects/spring-aiPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2026-41713ADVISORY
https://spring.io/security/cve-2026-41713WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan