CVE-2026-59302: Potential for logging sensitive data in Spring Cloud Stream
Published Aug 27, 2026
·Updated
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
Affected Software
6 affected components
Pivotal Spring Cloud Stream>=5.0.0<=5.0.2
Pivotal Spring Cloud Stream>=4.3.0<=4.3.3
Pivotal Spring Cloud Stream>=4.2.0<=4.2.6
VMware Spring Cloud Function>=4.2.0<4.2.7
VMware Spring Cloud Function>=4.3.0<4.3.4
VMware Spring Cloud Function>=5.0.0<5.0.3
Remediation
Patch Available
Event History
Aug 27, 2026
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which Spring Cloud Stream versions are affected?
Affected versions are Spring Cloud Stream 5.0.0 through 5.0.2, 4.3.0 through 4.3.3, and 4.2.0 through 4.2.6.
2
What access and conditions are required for exploitation?
The available severity vector indicates network reachability, high attack complexity, high privileges, and user interaction are required. Exploitation may result in limited confidentiality and integrity impact, with no availability impact indicated.