[ Vendor · 61 CVEs ]
rabbitmq
CVEs affecting rabbitmq published in the last 30 days, plus any rabbitmq CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-67418 | 14 Oct 2026 | CVSS 5.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in… | |
| CVE-2026-67414 | 14 Oct 2026 | CVSS 6.0 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src/amqp10_binary_parser.erl… | |
| CVE-2026-67416 | 14 Oct 2026 | CVSS 5.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser in… | |
| CVE-2026-107386 | 8 Oct 2026 | CVSS 6.3 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KBamqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before… | Fix |
| CVE-2026-106121 | 6 Oct 2026 | CVSS 7.5 | RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSThe RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0… | Fix |
| CVE-2026-106122 | 6 Oct 2026 | CVSS 7.5 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersThe RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0… | Fix |
| CVE-2026-106123 | 6 Oct 2026 | CVSS 5.5 | RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0… | Fix |
| CVE-2026-67421 | 25 Sep 2026 | CVSS 6.8 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP… | Fix |
| CVE-2026-67410 | 25 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint… | Fix |
| CVE-2026-67411 | 25 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind… | Fix |
| CVE-2026-67412 | 25 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips… | |
| CVE-2026-67413 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's… | Fix |
| CVE-2026-67415 | 25 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime… | |
| CVE-2026-67419 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can… | Fix |
| CVE-2026-67420 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains… | Fix |
| CVE-2026-67239 | 25 Sep 2026 | CVSS 5.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS… | |
| CVE-2026-67241 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange… | Fix |
| CVE-2026-67242 | 25 Sep 2026 | CVSS 5.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-expiry checks for float exp… | Fix |
| CVE-2026-67406 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash… | |
| CVE-2026-67407 | 25 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838… | |
| CVE-2026-67408 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation… | Fix |
| CVE-2026-67409 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9, 4.1.14, 4.0.23, and 3.13.18, JWKS Fetch Ignores HTTP Response Status… | |
| CVE-2026-67226 | 25 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list… | Fix |
| CVE-2026-67227 | 25 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter… | Fix |
| CVE-2026-67230 | 25 Sep 2026 | CVSS 7.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither… | Fix |
| CVE-2026-67234 | 25 Sep 2026 | CVSS 4.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, get_auth_mechanism/1 used term_to_binary/1 on the… | Fix |
| CVE-2026-67237 | 25 Sep 2026 | CVSS 9.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization… | Fix |
| CVE-2026-66073 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API… | Fix |
| CVE-2026-66078 | 25 Sep 2026 | CVSS 5.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delete. dELETE… | Fix |
| CVE-2026-67222 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied list_to_atom/1 to every… | |
| CVE-2026-67223 | 25 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains… | Fix |
| CVE-2026-67225 | 25 Sep 2026 | CVSS 7.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value… | Fix |
| CVE-2026-61837 | 25 Sep 2026 | CVSS 5.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full… | Fix |
| CVE-2026-66071 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag… | Fix |
| CVE-2026-67236 | 25 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused is_authorized/2 to set an auth cookie… | Fix |
| CVE-2026-67233 | 24 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's… | |
| CVE-2026-67232 | 23 Sep 2026 | CVSS 7.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117… | |
| CVE-2026-67235 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize (a uint64) was… | |
| CVE-2026-67240 | 23 Sep 2026 | CVSS 2.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with… | |
| CVE-2026-67404 | 23 Sep 2026 | CVSS 7.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available… | |
| CVE-2026-67405 | 23 Sep 2026 | CVSS 8.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler… | |
| CVE-2026-67219 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_binding/3 parses the routing key as an… | |
| CVE-2026-67220 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic… | |
| CVE-2026-67221 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls… | |
| CVE-2026-67224 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output… | |
| CVE-2026-67228 | 23 Sep 2026 | CVSS 6.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component… | |
| CVE-2026-67229 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls… | |
| CVE-2026-67231 | 23 Sep 2026 | CVSS 9.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a… | |
| CVE-2026-66069 | 23 Sep 2026 | CVSS 2.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is_authorized/2 uses is_authorized_monitor for all methods… | |
| CVE-2026-66072 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, get_chunk_selector/1 calls binary_to_atom… | |
| CVE-2026-66074 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-supplied… | |
| CVE-2026-66075 | 23 Sep 2026 | CVSS 5.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is_authorized/2 for the… | |
| CVE-2026-66077 | 23 Sep 2026 | CVSS 6.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which <%= … | |
| CVE-2026-66080 | 23 Sep 2026 | CVSS 4.9 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validate_partitions only checks that the requested… | |
| CVE-2026-67218 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls… | |
| CVE-2026-66067 | 23 Sep 2026 | CVSS 6.0 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only check_vhost_access; it omits the… | |
| CVE-2026-66068 | 23 Sep 2026 | CVSS 4.4 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("shutting down Shovel '~ts'… | |
| CVE-2026-66076 | 23 Sep 2026 | CVSS 6.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, is_authorized/2 calls… | |
| CVE-2026-66079 | 23 Sep 2026 | CVSS 7.5 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse_array_primitive/2 for constructor 0x45… | |
| CVE-2026-67238 | 23 Sep 2026 | CVSS 7.1 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbit_pid_codec:decompose_from_binary/1 parses a caller-supplied… | |
| CVE-2026-66070 | 23 Sep 2026 | CVSS 8.8 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin… |