CVE-2026-47852: A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.

A local attacker (someone with access to the same computer) on a shared machine can create a predictable storage folder path ahead of time and place a malicious ONNX model file (a machine learning model format) there, potentially compromising Spring AI applications. This vulnerability affects Spring AI versions 1.0.0 through 1.1.8 and version 2.0.0.