Rabbitmq vulnerabilities
100 CVEs and advisories name Rabbitmq as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-67418RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
- CVE-2026-67414RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation
- CVE-2026-67416RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
- CVE-2026-107386amqp091-go: Pre-negotiation frame limit is not enforced to 4KB
- CVE-2026-106123RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
- CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
- CVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
- CVE-2026-67420RabbitMQ OAuth credential refresh retains revoked runtime tags
- CVE-2026-67419RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
- CVE-2026-67421RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
- CVE-2026-67408RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
- CVE-2026-67406RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status
- CVE-2026-67410RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
- CVE-2026-67227RabbitMQ: Atom exhaustion: to_atom on global-parameter :name
- CVE-2026-67407RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
- CVE-2026-67226RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list
- CVE-2026-67411RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
- CVE-2026-67413RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
- CVE-2026-61837RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks
- CVE-2026-67415RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
- CVE-2026-67412RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
- CVE-2026-67409RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
- CVE-2026-67242RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp
- CVE-2026-67223RabbitMQ: LDAP DN injection via unescaped substitution
- CVE-2026-67239RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
- CVE-2026-67241RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check
- CVE-2026-66071RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
- CVE-2026-66078RabbitMQ: protected tag bypass via bulk-delete
- CVE-2026-66073RabbitMQ: Atom table exhaustion via management API node field
- CVE-2026-67237RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint