CVE-2026-22730
8.8HIGHОпубликовано: 3/18/2026Обновлено: 3/18/2026
Описание
A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.