CVE-2026-59306

LowCVSS 3.1

Published: 27/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Summary

Vulnerability in Spring Cloud Stream allows deserialization of untrusted types, which may lead to remote code execution or other deserialization attacks.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code in the context of the application, potentially leading to system compromise or data breach.

Recommendation

Update Spring Cloud Stream to a patched version or apply available security fixes.

Original NVD description (English source)

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6