VULNERABILITY INTELLIGENCE

CVE-2026-59308

CVSS score4.2 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-08-21
Last modified2026-10-16
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Weakness classification

  • security@vmware.com: CWE-668

Primary references