CVE-2026-59308— Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation
Possible ATT&CK Techniques 1AI
T1567 · Exfiltration Over Web ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-59308
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation
Source: CVE Program / CVE List V5
Vulnerability Description
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
将资源暴露给错误范围
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-59308
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-59308
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-59308 (1)
Same Patch Batch · Spring · 2026-08-21 · 3 CVEs total
| CVE-2026-59279 | 7.5 HIGH | Unbounded persistent session allocation via repeated initialize requests |
| CVE-2026-59318 | 6.5 MEDIUM | DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via P |
IV. Related Vulnerabilities
Same product: Spring AI
- CVE-2026-59318
DefaultToolCallingManager Global Resolver Fallback Allows Un - CVE-2026-59279
Unbounded persistent session allocation via repeated initial - CVE-2026-47835
Spring AI vector store metadata filtering to handle special - CVE-2026-41863
LLM-influenced filename used unsanitized in Path.resolve bef - CVE-2026-41713
Prompt Injection via Memory Poisoning in PromptChatMemoryAdv
Same vendor: Spring
- CVE-2026-59318
DefaultToolCallingManager Global Resolver Fallback Allows Un - CVE-2026-59279
Unbounded persistent session allocation via repeated initial - CVE-2026-59326
HTTP Proxy Credentials Logged in Plaintext by the Spring Boo - CVE-2026-59328
Cross-Site Scripting in Eclipse Spring Boot Starter Wizard D - CVE-2026-59327
Cleartext Storage of Spring Boot DevTools Remote Secret in E
Same weakness: CWE-668
- CVE-2026-72782
Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak - CVE-2026-72764
n8n before 1.123.67 Module Cache Poisoning via Code Node - CVE-2026-70606
Electron: ProtocolResponse.url reuses the default session ca - CVE-2026-54727
proot-distro has a Container Isolation Bypass via Crafted Re - CVE-2026-59835
Fortinet FortiSandbox 权限许可和访问控制问题漏洞
V. Comments for CVE-2026-59308
No comments yet