← CVE Intelligence

CVE-2026-59271

Admin password disclosed in BrokerNotAliveException message PUBLISHED

Description (CNA)

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

Affected (CNA)

Vendor / productVersions
Spring / Spring AMQPaffected 4.1.0; affected 4.0.0 through 4.0.4; affected 3.2.0 through 3.2.12; affected 0 through 2.4.18

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.