CVE-2026-59318 | VMware Spring AI up to 1.0.9/1.1.8/2.0.0 Tool Call privileges management

A vulnerability, which was classified as critical, was found in VMware Spring AI up to 1.0.9/1.1.8/2.0.0. Impacted is an unknown function of the component Tool Call Handler. Executing a manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2026-59318. The attack can be launched remotely. No exploit exists. Weiterlesen