DeutschShown in its original language — a full translation is planned for a future version.
RabbitMQ: Mehrere Schwachstellen
view advisory published 2026-07-09
Ein Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (29)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-67237US | critical9.3 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization header or access_token cookie into O… | ||||
| CVE-2026-67234US | medium4.3 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, get_auth_mechanism/1 used term_to_binary/1 on the strict_auth_mechanism or preferred_auth_mechanism… | ||||
| CVE-2026-67230US | high7.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither max_frame_size nor login_timeou… | ||||
| CVE-2026-67222US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied list_to_atom/1 to every colon-delimited token in an attacke… | ||||
| CVE-2026-66078US | medium5.5OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delete. dELETE /api/users/:name refuses to de… | ||||
| CVE-2026-66073US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost… | ||||
| CVE-2026-67233US | high7.1OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is_authorized/2 delegates to rabbit_mgmt… | ||||
| CVE-2026-67405US | high8.1 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler (deps/rabbitmq_web_mqtt/src/rabbit_web_mqtt_… | ||||
| CVE-2026-67404US | high7.4 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl_options/1 falls back to [{verify, ver… | ||||
| CVE-2026-67240US | — | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with only [unicode]; re:run is calle… | ||||
| CVE-2026-67232US | high7.5 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117 set compress => true, enabling R… | ||||
| CVE-2026-67231US | critical9.1 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify_fun that overrides {bad_cert, un… | ||||
| CVE-2026-67229US | medium4.9 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls rabbit_data_coercion:atomize_keys/1 (the unsafe variant… | ||||
| CVE-2026-67228US | — | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbit_data_c… | ||||
| CVE-2026-67224US | medium4.9 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:join(TraceDir,… | ||||
| CVE-2026-67221US | medium4.9OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqp_uri:remove_credentials before storing it… | ||||
| CVE-2026-67220US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, add_binding/3 reads the… | ||||
| CVE-2026-67219US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_binding/3 parses the routing key as an integer weight N and computes… | ||||
| CVE-2026-67218US | medium6.5OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:create_super_stream/... di… | ||||
| CVE-2026-66077US | medium6.1 | — | ||
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which <%= ... %> does NOT HTML-escape. connect… | ||||
showing 20 of 29
02
references
External citations — patches, advisories, analysis.
- RabbitMQ Releases vom 2026-07-09external
- GitHub Security Advisory GHSA-2rf7-f6r6-8rwh vom 2026-07-09external
- GitHub Security Advisory GHSA-34jw-rm7g-hph4 vom 2026-07-09external
- GitHub Security Advisory GHSA-37wx-r6q9-6fhj vom 2026-07-09external
- GitHub Security Advisory GHSA-48hm-chgv-398r vom 2026-07-09external
- GitHub Security Advisory GHSA-59c5-553c-57m2 vom 2026-07-09external
- GitHub Security Advisory GHSA-6v53-r759-jrvx vom 2026-07-09external
- GitHub Security Advisory GHSA-73qp-fwh4-2q5g vom 2026-07-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan