CVE-2026-59318
Received Received - Intake

Privilege Escalation in Spring AI Tool Calling

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: VMware

Description
In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation. Affected versions: Spring AI: 2.0.0 Spring AI: 1.1.0 through 1.1.8 Spring AI: 1.0.0 through 1.0.9

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-59318
EUVD
EUVD-2026-63933

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
spring_ai spring_ai to 2.0.0 (inc)
spring_ai spring_ai From 1.1.0 (inc) to 1.1.8 (inc)
spring_ai spring_ai From 1.0.0 (inc) to 1.0.9 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-59318 is a vulnerability in Spring AI's tool calling support where the per-request tool list advertised to the model is not fully enforced. This allows unauthorized tool invocation under certain conditions, potentially leading to privilege escalation.

Detection Guidance

To detect this vulnerability, check if your Spring AI version is within the affected range (1.0.0-1.0.9, 1.1.0-1.1.8, or 2.0.0). Use commands like 'mvn dependency:tree' or 'gradle dependencies' to inspect project dependencies. If using Spring AI, verify if the DefaultToolCallingManager is present and if tool call restrictions are enforced per request.

Impact Analysis

This vulnerability could allow an attacker to invoke tools not permitted for a specific request, potentially leading to unauthorized actions or privilege escalation within the system.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized tool invocation, which may lead to unauthorized data access or processing. Unauthorized privilege escalation could violate data protection requirements under these regulations.

Mitigation Strategies

Upgrade to fixed versions of Spring AI: 2.0.1 (OSS), 2.0.0.1 (Enterprise), 1.1.9 (Enterprise), or 1.0.10 (Enterprise). No additional mitigation steps are required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59318. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart