CVE-2026-59302: Potential for logging sensitive data in Spring Cloud Stream
Published Aug 27, 2026
·Updated
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
Affected Software
3 affected components
Pivotal Spring Cloud Stream>=5.0.0<=5.0.2
Pivotal Spring Cloud Stream>=4.3.0<=4.3.3
Pivotal Spring Cloud Stream>=4.2.0<=4.2.6
Event History
Aug 27, 2026
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Which Spring Cloud Stream versions are affected?
Affected versions are Spring Cloud Stream 5.0.0 through 5.0.2, 4.3.0 through 4.3.3, and 4.2.0 through 4.2.6.
2
What access and conditions are required for exploitation?
The available severity vector indicates network reachability, high attack complexity, high privileges, and user interaction are required. Exploitation may result in limited confidentiality and integrity impact, with no availability impact indicated.