CVE-2026-41863: Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk

May 26, 2026 (updated June 30, 2026)

Spring AI’s support for Anthropic’s Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories.

Affected versions: Spring AI: 1.1.0 through 1.1.7

References

github.com/advisories/GHSA-cc4m-mp48-x7qg
nvd.nist.gov/vuln/detail/CVE-2026-41863
spring.io/security/cve-2026-41863

Code Behaviors & Features

Detect and mitigate CVE-2026-41863 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →