Vulnerability Details CVE-2026-59318
In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation.
Affected versions:
Spring AI: 2.0.0
Spring AI: 1.1.0 through 1.1.8
Spring AI: 1.0.0 through 1.0.9
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 6.5%
CVSS Severity
CVSS v3 Score 6.5
References