BaselineWatch
Desk

CVE-2026-59308

4.3 medium SSVC exploitation: none Analyzed

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 4.3 · vmwareNVD modified 2026-10-16 13:10

Affected (CPE criteria) 1

  • cpe:2.3:a:vmware:spring_ai:*:-:*:*:*:*:*:*

References 1