CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application.
Affected version
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
MEDIUM · CVSS 6.1
EPSS 0.00018
Monitor
- No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence
Sigma rules0
YARA rules0