HighVulnerability
CVE-2026-47852: Spring AI local attacker can plant malicious ONNX model in cache path
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-47852
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. The affected component is Spring AI 2.0.0, 1.1.0 through 1.1.8, and 1.0.0 through 1.0.9.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoSecuring next-generation edge intelligence: A survey from federated learning to autonomous agents in cyber-physical systemsSimilar attack · OpenAlex (peer-reviewed AI security)
- InfoPop Goes the Verifier: Phoneme-Targeted Data Poisoning of Voice Liveness DetectionSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoCharacterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoDiscrete Unintentional Adversarial Perturbation Detection for DQN Traffic Signal ControlSimilar attack · OpenAlex (peer-reviewed AI security)
- InfoTrustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)