CVE-2026-59319

RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same class which do escape their inputs. An application that passes user-controlled values to findByMetadata() on a tag-typed metadata field allows an attacker to inject RediSearch syntax (e.g. x} | *) that breaks out of the tag clause and matches all indexed chat messages across every conversation in the index. Spring AI 2.0.0

• CWE-943

• https://spring.io/security/cve-2026-59319Vendor Advisory

Published

Aug 27, 2026

Last Modified

Aug 31, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59313Spring MVC applications using the functional web framework a…9.8
• CVE-2026-59314Applications that build a Content-Disposition header value f…3.7
• CVE-2026-59315The Spring Cloud Config Monitor is susceptible to Denial of …5.3
• CVE-2026-59316Spring Authorization Server's default consent page renders u…8.2
• CVE-2026-59317DeadLetterPublishingRecovererFactory reads the retry_topic-o…6.5
• CVE-2026-59318In Spring AI's tool calling support, the per-request tool li…9.8
• CVE-2026-59320When a container-level ErrorHandler is configured (the mitig…6.5
• CVE-2026-59321A single ScriptEngine instance is reused for every message o…5.4
• CVE-2026-59322The EmbeddedHeadersJsonMessageMapper defaults to an overly p…6.3
• CVE-2026-59323An application using Micrometer Tracing with W3C baggage pro…5.3
• CVE-2026-59324When an IntegrationFlow uses .fluxTransform() with an asynch…8.2
• CVE-2026-59326The Spring Boot language server logs the raw value of the ht…3.3