CVE-2026-22743
Received Received - Intake
Cypher Injection in Spring AI Neo4j Store Enables Data Manipulation

Publication date: 2026-03-27

Last updated on: 2026-04-16

Assigner: VMware

Description
Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-27
Last Modified
2026-04-16
Generated
2026-06-16
AI Q&A
2026-03-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-22743
EUVD
EUVD-2026-16539
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
vmware spring_ai From 1.0.0 (inc) to 1.0.5 (exc)
vmware spring_ai From 1.1.0 (inc) to 1.1.4 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-22743 is a Cypher injection vulnerability in the spring-ai-neo4j-store component of Spring AI, specifically in the Neo4jVectorFilterExpressionConverter class.

When a user-controlled string is passed as a filter expression key, the method doKey() embeds this key into a backtick-delimited Cypher property accessor (like node.`metadata.`) after removing only double quotes, but it does not escape embedded backticks.

This improper sanitization allows an attacker to perform Cypher injection, which can lead to Server-Side Request Forgery (SSRF) attacks.

Impact Analysis

This vulnerability can allow an attacker to perform Cypher injection attacks, potentially leading to Server-Side Request Forgery (SSRF).

An SSRF attack can enable an attacker to make unauthorized requests from the server, potentially accessing internal systems or sensitive data.

The CVSS base score of 7.5 indicates a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed, with high confidentiality impact.

Mitigation Strategies

The primary mitigation step is to upgrade the affected spring-ai-neo4j-store component to a fixed version.

  • For Spring AI 1.0.x series, upgrade to version 1.0.5.
  • For Spring AI 1.1.x series, upgrade to version 1.1.4.

No additional mitigation steps are required beyond upgrading.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22743. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart