CVE-2026-40980 | Vmware Spring AI up to 1.0.5/1.1.4 PDF File ForkPDFLayoutTextStripper resource consumption

A vulnerability has been found in Vmware Spring AI up to 1.0.5/1.1.4 and classified as problematic. Affected by this issue is the function ForkPDFLayoutTextStripper of the component PDF File Handler. Performing a manipulation results in resource consumption.

This vulnerability was named CVE-2026-40980. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.