A resource exhaustion vulnerability in Spring AI allows unauthenticated remote attackers to cause a denial of service by overwhelming the server with excessive session requests.

The application is susceptible to resource exhaustion (CWE-770) due to the absence of limits on session retention and a lack of default authentication for the MCP Streamable HTTP server transport. This allows an unauthenticated attacker to rapidly consume system memory or process cycles.

Successful exploitation results in a denial of service, rendering the application unavailable to legitimate users. With a CVSS score of 7.5, the impact is significant, as the lack of authentication makes the service easily exploitable by any network-connected actor, potentially causing major service disruptions.

Immediate Action: Apply the vendor-provided security updates for Spring AI to implement necessary session limits and authentication controls.

Proactive Monitoring: Monitor server resource utilization, including memory usage and active session counts, to detect potential spikes indicative of a denial of service attack.

Compensating Controls: Implement rate limiting or connection throttling at the network perimeter or via a load balancer to prevent excessive session creation.

Public Exploit Available: No

Service availability is a core requirement for business operations. It is imperative that administrators update their Spring AI implementation to the patched version to enforce authentication and protect system resources from exhaustion.