CVE-2026-59272

Name of the Vulnerable Software and Affected Versions Spring AMQP version 4.1.0 Spring AMQP versions 4.0.0 through 4.0.4 Spring AMQP versions 3.2.0 through 3.2.12 Spring AMQP versions 2.4.18 and earlier

Description Applications that send logs to RabbitMQ over TLS using the Log4j2 appender are susceptible to man-in-the-middle interception of all log events when relying on the documented default settings. A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.