CVE-2026-41863: VMware Spring Ai

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories. Affected versions: Spring AI: 1.1.0 through 1.1.x

Affected products

• VMware Spring Ai: from 1.1.0, before 1.1.7 (fixed in 1.1.7)

Published 2026-05-25. Last modified 2026-07-23.