Tran Hoang Phuc Quan

**Name of the Vulnerable Software and Affected Versions** Spring AI version 2.0.0 **Description** The `findByMetadata()` function in `RedisChatMemoryRepository` constructs RediSearch tag and text queries using metadata values provided by the caller without applying `RediSearchUtil.escape()`. This differs from the `get()`, `clear()`, and `findByTimeRange()` functions in the same class, which properly escape inputs. If an application passes user-controlled values to `findByMetadata()` on a tag-typed metadata field, an attacker can inject RediSearch syntax to break out of the tag clause and retrieve all indexed chat messages across every conversation in the index. **Recommendations** Update Spring AI to a version newer than 2.0.0. As a temporary mitigation, avoid passing user-controlled values to the `findByMetadata()` function.