MediumVulnerability
CVE-2026-40979: Spring AI exposes ONNX model to access through shared environment
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-40979
- Published
- Record updated
- Affected
- org.springframework.ai:spring-ai-transformers >= 1.0.0, < 1.0.6, fixed in 1.0.6
- org.springframework.ai:spring-ai-transformers >= 1.1.0, < 1.1.5, fixed in 1.1.5
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.1%
Summary
CVE-2026-40979 affects Spring AI, where access to a shared environment can expose the ONNX model the application uses. Affected versions are 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4, with CWE-377 (Insecure Temporary File) listed as the weakness. NVD has not yet provided an assessment.
Mitigation
Fixed in 1.0.6 (for 1.0.x) and 1.1.5 (for 1.1.x).
Related items
- HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
- HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
- MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
- MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
- MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News