CVE-2026-47851

Published: Aug 27, 2026Modified: Sep 4, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security@vmware.com (Secondary)

Description

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9

Affected (3)

Products: Vmware: Spring Ai

Vmware

1 product

Spring Ai

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Ai	From 1.0.0 to 1.0.10
Vmware Spring Ai	From 1.1.0 to 1.1.9
Vmware Spring Ai	From 2.0.0 to 2.0.0.1

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (1)

https://spring.io/security/cve-2026-47851

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.