The release includes an embedded MCP server that exposes Spring project analytics to AI coding assistants, along with first-class support for Spring AI and automated property refactoring.
Separate actors exploited the same exposure, creating overlapping intrusions that obscured detection and response.