CVE-2026-41863

Published: May 25, 2026Modified: Jul 23, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: security@vmware.com (Secondary)

Description

Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories. Affected versions: Spring AI: 1.1.0 through 1.1.x

Affected (1)

Products: Vmware: Spring Ai

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Ai	From 1.1.0 to 1.1.7

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://spring.io/security/cve-2026-41863

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.