Container-Level Error Handler Issue in Spring AMQP by Pivotal
CVE-2026-59320

6.5MEDIUM

Key Information:

Vendor

Spring

Status
Spring AMQp
Vendor
CVE Published:
27 August 2026

What is CVE-2026-59320?

A configuration issue with the container-level ErrorHandler in Spring AMQP can lead to stalling during message delivery when errors occur. Specifically, after a predefined number of initial credits for message delivery are exhausted due to processing errors, the receiver's credit reaches zero. This causes the message broker to halt further deliveries, leaving the listener in a stalled state despite its isRunning() status remaining true. This behavior can significantly impact message throughput and system reliability.

Affected Version(s)

Spring AMQP 4.1.0

References

https://spring.io/security/cve-2026-59320

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.