CVE-2026-59271 Security Details

CVE ID

CVE-2026-59271

CWE

CWE-209

CVE Description

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

Published

Aug 20, 2026

CVSS Score & Severity

6.5Medium

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.324%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/springframework/amqp/rabbit/junit/BrokerRunningSupport.alivenessTest()V

JVM

Affected Ecosystems

affected

Source

National Vulnerability Database

References

spring.ioPROJECT