Vulnerability intelligence
CVE-2026-59318
In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation. Affected versions: Spring AI: 2.0.0 Spring AI: 1.1.0 through 1.1.8 Spring AI: 1.0.0 through 1.0.9
CVSS Score
6.5
Medium
EPSS — Exploit Probability
0.3%
Riskier than 16% of all CVEs · checked 2026-10-19
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Check vendor advisories
1 article across 1 outlet · first covered Aug 24, 2026 · latest Aug 24, 2026
Coverage timeline
-
Spring patches 91 bugs, fixing critical LDAP flaw CVE-2026-59270www.securityweek.com · Aug 24, 2026