CVE-2026-59308

—

CVSS 3.1

4.2 medium

EPSS

<1%p5

Published

Aug 21, 2026 (25d ago)

Modified

Aug 28, 2026

Description

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0

Weakness: CWE-668
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.