What is CVE-2026-59294?

CVE-2026-59294 is a medium-severity vulnerability in Spring Ai, classified under CWE-22 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL'). CVSS score: 5.9/10. Published 2026-08-27.

How severe is CVE-2026-59294?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Spring Ai

CVE-2026-59294

ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new File(resourceParentFolder, newFileName) before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.9 and earlier

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L.

Affected products

Spring Ai — versions 2.0.0

References

security@vmware.com

Frequently asked questions

What is CVE-2026-59294?: CVE-2026-59294 is a medium-severity vulnerability in Spring Ai, classified under CWE-22 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL'). CVSS score: 5.9/10. Published 2026-08-27.
How severe is CVE-2026-59294?: Medium severity. CVSS v3 base score is 5.9 out of 10.