
CVE-2026-22738
SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
educationexploitationpayload-development+3
2

SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution

CVE-2025-8088 exploitation chain + Quasar C2 multi-stage payload delivery

Langflow Remote Code Execution (RCE) Proof-of-Concept