CVE-2026-47852

Published: Aug 27, 2026Modified: Sep 4, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: security@vmware.com (Secondary)

Description

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9

Affected (3)

Products: Vmware: Spring Ai

Vmware

1 product

Spring Ai

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Ai	From 1.0.0 to 1.0.10
Vmware Spring Ai	From 1.1.0 to 1.1.9
Vmware Spring Ai	From 2.0.0 to 2.0.0.1

Related CWEs

CWE-377

Insecure Temporary File

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

References (1)

https://spring.io/security/cve-2026-47852

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.