Loading the current evidence view. Navigation and account controls remain available.
Indicator investigation
Loading the current evidence view. Navigation and account controls remain available.
Loading verdict, provenance, relationships and sightings.
Indicator
Type cve · source intel_report_ingest
Grouped attempts with latest status; expand for attempt history.
33 attempts · first 2026-08-28T17:00:58.896593Z · last 2026-09-05T10:19:21.470590Z
Not listed in CISA KEV (local)
Types: cisa_kev
33 attempts · first 2026-08-28T17:00:58.901017Z · last 2026-09-05T10:19:21.475352Z
In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege escalation. Affected versions: Spring AI: 2.0.0 Spring AI: 1.1.0 through 1.1.8 Spring AI: 1.0.0 through
Types: nvd_local
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
Full investigation canvas with neighbor expansion.