{"data":{"id":"28ea757d-c917-4c88-a84e-e1d3aaf63721","title":"CVE-2026-47852: A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.","summary":"A local attacker (someone with access to the same computer) on a shared machine can create a predictable storage folder path ahead of time and place a malicious ONNX model file (a machine learning model format) there, potentially compromising Spring AI applications. This vulnerability affects Spring AI versions 1.0.0 through 1.1.8 and version 2.0.0.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47852","publishedAt":"2026-08-27T01:17:32.320Z","cveId":"CVE-2026-47852","cweIds":null,"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["model_poisoning"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Spring AI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-27T01:17:32.320Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}