# CVE-2026-22743: spring-ai-neo4j-store — Fixed in 1.0.5 ☕ ☕ Maven Not in CISA KEV HIGH severity # CVE-2026-22743 — spring-ai-neo4j-store HIGH [Fix: spring-projects/spring-ai@3a46c7d](https://github.com/spring-projects/spring-ai/commit/3a46c7dd00e4adc17a132b9438149bde94da244f) CVE-2026-22743 is a high-severity (CVSS 7.5) SQL Injection vulnerability in org.springframework.ai:spring-ai-neo4j-store. A fix is available for org.springframework.ai:spring-ai-neo4j-store — see the affected versions and patch details below. Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore Also known as[GHSA-7cj7-rcw6-p68v](/vulnerability/GHSA-7cj7-rcw6-p68v) Published Mar 27, 2026 Updated Oct 28, 2026 Affected 2 pkgs Patched 2 / 2 Exploits None indexed Exploitation data as of Nov 2, 2026 · OSV.dev, NVD, FIRST.org (EPSS) ## Exploitation Status ### No confirmed exploitation observed yet - CISA assesses this as automatable — exploitation doesn’t require manual, per-target effort, which raises the odds of mass scanning and opportunistic attacks. - CISA’s own triage has not observed active exploitation or public proof-of-concept code for this CVE as of its last assessment. Exploitation and automatability from CISA’s SSVC triage for CVE-2026-22743. ## EPSS Exploitation Probability [via FIRST.org ↗](https://www.first.org/epss/) 0.3%probability of exploitation in next 30 days Lower Risk0.00% Lower risk than most CVEs17th percentile — riskier than 17% of all scored CVEsHighest risk 0.00%0.25%0.50%0.76%0.1%0.3%May 26Sep 26Nov 26 Probability of exploitation in the next 30 days, from [FIRST.org EPSS](https://www.first.org/epss/). ## How urgent is this, really ## Where this sits among everything scored ## Real-World Exposure 2 pkgs affected ☕`org.springframework.ai:spring-ai-neo4j-store`☕`org.springframework.ai:spring-ai-neo4j-store` Real-time download stats are indexed for npm and PyPI packages. This vulnerability affects Maven packages — download data is not available via public APIs for these ecosystems. ## Description Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4. ## Affected Packages 2 total 2 fixed Ecosystem Package Vulnerable range Fix ☕Maven `org.springframework.ai:spring-ai-neo4j-store` ≥ 1.0.0-M5&&< 1.0.5 1.0.5`org.springframework.ai:spring-ai-neo4j-store:1.0.5` ☕Maven `org.springframework.ai:spring-ai-neo4j-store` ≥ 1.1.0-M1&&< 1.1.4 1.1.4`org.springframework.ai:spring-ai-neo4j-store:1.1.4` ## Affected Products 1 product · 2 configurations Application `spring ai`vmware ≥ 1.1.0 && < 1.1.4 range ## Detection & mitigation playbook Open-source dependency 1. ### Detect Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for org.springframework.ai:spring-ai-neo4j-store, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version. 2. ### Fix Update org.springframework.ai:spring-ai-neo4j-store to 1.0.5 or later, then make sure no transitive (indirect) dependency still pins the vulnerable range — O3 confirms CVE-2026-22743 is resolved across your whole dependency graph. 3. ### Workarounds Until you can upgrade, make sure every query built from user input uses parameterised statements or a prepared-statement API rather than string concatenation, and reduce the database account's privileges so an injected query cannot read or alter data beyond what the feature needs. ## Frequently Asked Questions Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.\`metadata.\`) after stripping only double quotes, without escaping embedded backticks. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4. O3 Security · Impact-Aware SCA ### Is CVE-2026-22743 in your dependencies? Find it across Maven, including transitive dependencies. [Scan my dependencies](/book-demo) [How O3 SCA works](/impact-aware-sca)