CVE-2026-41713

8.2 Élevée

Publiée le 12/05/2026 à 13:16 · Modifiée le 17/06/2026 à 12:47 · Analysée par le NVD · Source : security@vmware.com

Description

A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.

Traduire en français

Produits concernés

VMware Spring AI

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.2 Élevée	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N`

Faiblesses (CWE)

CWE-1336

Références

https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N&version=3.1 US Government Resource
https://spring.io/security/cve-2026-41713 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories