CVE-2026-22742 | VMware Spring AI up to 1.0.4/1.1.3 Multimodal Message server-side request forgery

March 27, 2026 Yanac

A vulnerability identified as critical has been detected in VMware Spring AI up to 1.0.4/1.1.3. This affects an unknown part of the component Multimodal Message Handler. Performing a manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-22742. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More