← CVE Intelligence

CVE-2026-41701

In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues PUBLISHED

Description (CNA)

Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17.

Affected (CNA)

Vendor / productVersions
Spring / Spring AMQPaffected 4.0.0 before 4.0.3.1; affected 3.2.0 before 3.2.10.1; affected 3.1.0 before 3.1.16; affected 2.4.0 before 2.4.18

CWE

CWE-330

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.