CVE-2026-40980 Spring AI Vulnerable to OOM by attacker-controlled PDF
A malicious PDF can cause excessive memory allocation in Spring AI, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-40980?
CVE-2026-40980 is a medium-severity denial of service vulnerability in Spring AI, published on 28 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.
Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Weakness: CWE-400
Which versions are affected by CVE-2026-40980?
4 open source packages ship an affected version, including org.springframework.ai:spring-ai-pdf-document-reader. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.springframework.ai:spring-ai-pdf-document-reader Maven | From 1.0.0 | 1.0.6 |
org.springframework.ai:spring-ai-pdf-document-reader Maven | From 1.0.0 | 1.0.6 |
org.springframework.ai:spring-ai-pdf-document-reader Maven | From 1.1.0 | 1.1.5 |
org.springframework.ai:spring-ai-pdf-document-reader Maven | From 1.1.0 | 1.1.5 |
Products include Vmware Spring Ai.
How do I fix CVE-2026-40980?
Upgrade org.springframework.ai:spring-ai-pdf-document-reader to a fixed version for your release line: 1.0.6 or 1.1.5.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-40980 being exploited?
There is no known exploitation of CVE-2026-40980 in the wild and no public exploit code.
Other vulnerabilities in Spring AI
- CVE-2026-22738 SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
- CVE-2026-40978 Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()
- CVE-2026-22730 CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter
- CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
- CVE-2026-41705 Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
Sources
Also known as GHSA-26gg-9gv2-v27j.