ByteOS Network

CVE Vulnerability Details :

CVE-2026-22742

PUBLISHED

More Info Official Page

Assigner-vmware

Assigner Org ID-dcf2e128-44bd-42ed-91e8-88f912c1401d

Published At-27 Mar, 2026 | 05:27

Updated At-10 May, 2026 | 13:03

▼CVE Numbering Authority (CNA)

Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching

Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to induce the server to issue HTTP requests to unintended internal or external destinations. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

Affected Products

Vendor

VMware (Broadcom Inc.)

Product

Spring AI

Default Status

unaffected

Versions

Affected

From 1.0.0 before 1.0.5 (custom)
From 1.1.0 before 1.1.4 (custom)

Metrics

Version	Base score	Base severity	Vector
3.1	8.6	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Version: 3.1

Base score: 8.6

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References

Hyperlink	Resource
https://spring.io/security/cve-2026-22742	N/A

Hyperlink: https://spring.io/security/cve-2026-22742

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-918	CWE-918 Server-Side Request Forgery (SSRF)

Type: CWE

CWE ID: CWE-918

Description: CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

Affected

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References