CVE-2026-59318

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 0.25%
EPSS Percentile: 16.02%
CISA KEV: Not listed

Description

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation. Affected versions: Spring AI: 2.0.0 Spring AI: 1.1.0 through 1.1.8 Spring AI: 1.0.0 through 1.0.9

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 21-Aug-2026 19:16
Last Modified: 16-Oct-2026 02:10
EPSS Date: 2026-10-23
CWE: CWE-863

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

vmware / spring_ai Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 1.0.0 · before (exclusive) 1.0.10
cpe:2.3:a:vmware:spring_ai:*:-:*:*:*:*:*:*
vmware / spring_ai Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 1.1.0 · before (exclusive) 1.1.9
cpe:2.3:a:vmware:spring_ai:*:-:*:*:*:*:*:*
vmware / spring_ai Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 2.0.0 · before (exclusive) 2.0.1
cpe:2.3:a:vmware:spring_ai:*:-:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 02-Nov-2026 09:22
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

which it describes as a critical remote code execution issue in Spring for GraphQL, and CVE-2026-59318, a medium-severity issue in Spring AI’s tool-calling functionality that can allow privilege Spring Framework Updates Patch 91 Vulnerabilities

CVE (2)

Vendors (1)

Products (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.