CVE-2026-40979

MEDIUM

Published Apr 28, 2026 Modified Apr 29, 2026 CWE-377

Description

In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

CVSS v3.1 Score

6.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS — Exploit Prediction

0.0002

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-377 CWE-377

Affected Products

Vendor	Product	Versions
vmware	spring_ai	1.0.0 — 1.0.6
vmware	spring_ai	1.1.0 — 1.1.5

References

Advisories & Patches

https://spring.io/security/cve-2026-40979

Frequently Asked Questions

What is CVE-2026-40979? +

In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5) It has a CVSS v3.1 base score of 6.1 (MEDIUM).

How severe is CVE-2026-40979? +

CVE-2026-40979 has a CVSS v3.1 score of 6.1 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance. The EPSS score is 0.0002, placing it in the 0th percentile for exploitation probability.

What products are affected by CVE-2026-40979? +

CVE-2026-40979 affects products from vmware, specifically: spring_ai. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2026-40979? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-6654

Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused …

CVE-2024-49506

Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set …

CVE-2025-14307 8.1

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to …

CVE-2025-34194 7.8

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments) …

CVE-2025-7707 7.8

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is …

CVE-2025-46369 7.8

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker …