Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2026-59308

Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Spring AI

Default version status: unaffected

  • 2.0.0affected

References