CVE-2026-22729

CVE-2026-22729 is a high-severity JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter, impacting applications that use vector stores for metadata-based access controls, such as multi-tenant isolation or role-based access. This flaw allows unauthenticated attackers to inject arbitrary JSONPath logic into filter expressions due to improper input escaping, enabling them to bypass security controls and access unauthorized documents. With a CVSS score of 8.6 HIGH, it features a network attack vector and low attack complexity, resulting in a high confidentiality impact. Currently, there is no evidence of active exploitation or public exploit code, though the vulnerability has received some community attention and media coverage.