What is CVE-2026-41701?

CVE-2026-41701 is a medium-severity vulnerability in Spring Amqp, classified under Use of Insufficiently Random Values. CVSS score: 4.4/10. Published 2026-06-10.

How severe is CVE-2026-41701?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Spring Amqp

CVE-2026-41701

Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15…

EPSS: 0.002 (7.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N.

Affected products

Spring Amqp — versions 4.0.0, 3.2.0, 3.1.0

Weakness classification (CWE)

CWE-330 — Use of Insufficiently Random Values

References

security@vmware.com

Frequently asked questions

What is CVE-2026-41701?: CVE-2026-41701 is a medium-severity vulnerability in Spring Amqp, classified under Use of Insufficiently Random Values. CVSS score: 4.4/10. Published 2026-06-10.
How severe is CVE-2026-41701?: Medium severity. CVSS v3 base score is 4.4 out of 10.