CVE-2026-41713— Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
Quick assessment
Affected
VMware Spring AI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
VMware Spring AI是美国威睿（VMware）公司的一个在Spring生态中集成人工智能与大语言模型能力的开发框架。 VMware Spring AI存在安全漏洞，该漏洞源于恶意用户可制作输入存储在对话内存中，导致模型以非预期方式解释，可能允许跨对话轮次操纵模型行为。
Possible ATT&CK Techniques 2 AI
T1586 · Compromise Accounts T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-41713
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
Source: CVE Program / CVE List V5
Vulnerability Description
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1336
Source: CVE Program / CVE List V5
Vulnerability Title
VMware Spring AI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware Spring AI是美国威睿（VMware）公司的一个在Spring生态中集成人工智能与大语言模型能力的开发框架。 VMware Spring AI存在安全漏洞，该漏洞源于恶意用户可制作输入存储在对话内存中，导致模型以非预期方式解释，可能允许跨对话轮次操纵模型行为。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-41713
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-41713
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-41713 (1)
IV. Related Vulnerabilities
Same product: Spring AI
-
CVE-2026-59318
DefaultToolCallingManager Global Resolver Fallback Allows Un -
CVE-2026-59308
Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Tru -
CVE-2026-59279
Unbounded persistent session allocation via repeated initial -
CVE-2026-47835
Spring AI vector store metadata filtering to handle special -
CVE-2026-41863
LLM-influenced filename used unsanitized in Path.resolve bef
Same vendor: VMware
-
CVE-2026-59296
Micrometer StatsD and Logging meter registries line-protocol -
CVE-2026-59323
Micrometer Tracing Brave Bridge W3C Baggage propagation DoS -
CVE-2026-41709
ESX insufficient logging vulnerability -
CVE-2026-41703
Out-of-bounds read vulnerability -
CVE-2026-47876
VMXNET3 out-of-bounds write vulnerability
Same weakness: CWE-1336
-
CVE-2026-75574
Grav before 4.2.2 Remote Code Execution via Email Twig -
CVE-2026-78140
Dromara UJCMS web-file-template Endpoint WebFileTemplateCont -
CVE-2026-72716
Orval: Import-time RCE via query-parameter default -> zod mo -
CVE-2026-52889
Formie: Server-Side Template Injection in Formie Hidden fiel -
CVE-2026-66613
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution
V. Comments for CVE-2026-41713
No comments yet