The vulnerability allows an attacker who can access a shared environment to read or copy the ONNX model used by the application, exposing valuable intellectual property. It is a confidentiality issue aligned with CWE‑377, where improper configuration of shared resources enables data leakage.

Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4 are impacted; the problem is fixed in 1.0.6 and 1.1.5.

The CVSS score of 6.1 indicates moderate severity. With no EPSS score available and the vulnerability not listed in CISA KEV, the attack likelihood hinges on the attacker’s ability to share the same environment. The most likely vector is local access or compromise of an application that shares the environment, allowing the attacker to read the model. Though it does not allow remote code execution, the exposure of the model can lead to intellectual‑property theft and potentially enable further attacks or reverse engineering.