CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- EPSS probability
- 0.10%
- CWE
- CWE-377
- Published
- 2026-04-28
- Last modified
- 2026-04-28
Affected products
- Spring Spring AI
- Spring Spring AI
Weakness type
Related vulnerabilities
- CVE-2026-40635 — Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File...
- CVE-2026-63404 — Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)
- CVE-2025-14602 — Weak File Name Generation in vsDesk
- CVE-2026-55086 — Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
- CVE-2026-75920 — phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
- CVE-2026-53759 — linuxfabrik-lib: Insecure creation of SQLite databases
- CVE-2026-73584 — Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
- CVE-2026-73585 — Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack