CVE-2026-47852

A local attacker on a multi-user host can exploit a vulnerability in Spring AI versions 1.0.0 to 2.0.0 by pre-creating a deterministic cache path to inject a malicious ONNX model file. This could lead to unauthorized execution of arbitrary code, potentially compromising the integrity and confidentiality of the affected system. Organizations using these versions of Spring AI, especially in multi-user environments, should prioritize patching to mitigate this high-severity risk.