CVE-2026-59308

Published: Aug 21, 2026Modified: Oct 16, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Affected (1)

Products: Vmware: Spring Ai

Vmware

1 product

Spring Ai

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Ai	2.0.0 ≤ version < 2.0.1

Related CWEs

CWE-668

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (1)

https://spring.io/security/cve-2026-59308

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.