CVE-2026-59271

Published September 3, 2026

CVSS 3.15.3

SeverityMedium

Known exploitedNo

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 – 4.0.4
Spring AMQP 3.2.0 – 3.2.12
Spring AMQP 2.4.18 and earlier

NVD references:

https://spring.io/security/cve-2026-59271

Primary source: NIST National Vulnerability Database

Stay Ahead of the Threat Landscape