# cve.now: Rabbitmq

The newest entries naming Rabbitmq as an affected vendor (up to 200), of 100 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-67418](https://cve.now/CVE-2026-67418.md): RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers (CVSS 5.3)
- [CVE-2026-67414](https://cve.now/CVE-2026-67414.md): RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation (CVSS 6.0)
- [CVE-2026-67416](https://cve.now/CVE-2026-67416.md): RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation (CVSS 5.3)
- [CVE-2026-107386](https://cve.now/CVE-2026-107386.md): amqp091-go: Pre-negotiation frame limit is not enforced to 4KB (CVSS 6.3)
- [CVE-2026-106123](https://cve.now/CVE-2026-106123.md): RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() (CVSS 5.7)
- [CVE-2026-106122](https://cve.now/CVE-2026-106122.md): RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers (CVSS 6.0)
- [CVE-2026-106121](https://cve.now/CVE-2026-106121.md): RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS (CVSS 4.9)
- [CVE-2026-67420](https://cve.now/CVE-2026-67420.md): RabbitMQ OAuth credential refresh retains revoked runtime tags (CVSS 2.3)
- [CVE-2026-67419](https://cve.now/CVE-2026-67419.md): RabbitMQ: Consecutive topic wildcards cause combinatorial routing work (CVSS 7.1)
- [CVE-2026-67421](https://cve.now/CVE-2026-67421.md): RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling (CVSS 4.5)
- [CVE-2026-67408](https://cve.now/CVE-2026-67408.md): RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service (CVSS 7.1)
- [CVE-2026-67406](https://cve.now/CVE-2026-67406.md): RabbitMQ: Federation and Shovel Gen-Servers Lack format\_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get\_status (CVSS 4.6)
- [CVE-2026-67410](https://cve.now/CVE-2026-67410.md): RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CVSS 8.2)
- [CVE-2026-67227](https://cve.now/CVE-2026-67227.md): RabbitMQ: Atom exhaustion: to\_atom on global-parameter :name (CVSS 5.9)
- [CVE-2026-67407](https://cve.now/CVE-2026-67407.md): RabbitMQ: Incomplete fix for CVE-2026-44838: \`escape\_regex\_char/1\` does not escape \`-\`, leaving room for an MQTT topic permission bypass (CVSS 5.1)
- [CVE-2026-67226](https://cve.now/CVE-2026-67226.md): RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list (CVSS 6.9)
- [CVE-2026-67411](https://cve.now/CVE-2026-67411.md): RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass (CVSS 6.0)
- [CVE-2026-67413](https://cve.now/CVE-2026-67413.md): RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression (CVSS 6.0)
- [CVE-2026-61837](https://cve.now/CVE-2026-61837.md): RabbitMQ: AMQP 1.0 management \`GET /bindings\` exposes full binding topology to any authenticated AMQP user without resource/management permission checks (CVSS 6.3)
- [CVE-2026-67415](https://cve.now/CVE-2026-67415.md): RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service (CVSS 5.9)
- [CVE-2026-67412](https://cve.now/CVE-2026-67412.md): RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access (CVSS 6.0)
- [CVE-2026-67409](https://cve.now/CVE-2026-67409.md): RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS (CVSS 8.2)
- [CVE-2026-67242](https://cve.now/CVE-2026-67242.md): RabbitMQ: OAuth2 is\_integer(Exp) guard skips token-expiry checks for float exp (CVSS 6.3)
- [CVE-2026-67223](https://cve.now/CVE-2026-67223.md): RabbitMQ: LDAP DN injection via unescaped substitution (CVSS 6.3)
- [CVE-2026-67239](https://cve.now/CVE-2026-67239.md): RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI (CVSS 7.6)
- [CVE-2026-67241](https://cve.now/CVE-2026-67241.md): RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check (CVSS 4.8)
- [CVE-2026-66071](https://cve.now/CVE-2026-66071.md): RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values (CVSS 6.0)
- [CVE-2026-66078](https://cve.now/CVE-2026-66078.md): RabbitMQ: protected tag bypass via bulk-delete (CVSS 2.1)
- [CVE-2026-66073](https://cve.now/CVE-2026-66073.md): RabbitMQ: Atom table exhaustion via management API node field (CVSS 6.0)
- [CVE-2026-67237](https://cve.now/CVE-2026-67237.md): RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint (CVSS 7.5)
- [CVE-2026-67234](https://cve.now/CVE-2026-67234.md): RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference (CVSS 2.3)
- [CVE-2026-67225](https://cve.now/CVE-2026-67225.md): RabbitMQ: Stream-protocol frame length never validated against frame\_max (CVSS 6.3)
- [CVE-2026-67230](https://cve.now/CVE-2026-67230.md): RabbitMQ: Web-STOMP unbounded pre-auth accumulation (CVSS 6.3)
- [CVE-2026-67222](https://cve.now/CVE-2026-67222.md): RabbitMQ: list\_to\_atom on auth\_mechanism URI tokens in amqp\_client (CVSS 5.9)
- [CVE-2026-67236](https://cve.now/CVE-2026-67236.md): RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login (CVSS 8.2)
- [CVE-2026-67233](https://cve.now/CVE-2026-67233.md): RabbitMQ: Monitoring-tag user can DELETE shovels (CVSS 6.0)
- [CVE-2026-67221](https://cve.now/CVE-2026-67221.md): RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords (CVSS 5.9)
- [CVE-2026-67231](https://cve.now/CVE-2026-67231.md): RabbitMQ: Trust-store whitelist by Issuer+Serial only (CVSS 9.1)
- [CVE-2026-67218](https://cve.now/CVE-2026-67218.md): RabbitMQ: Super-stream HTTP creation skips configure-permission check (CVSS 2.1)
- [CVE-2026-66074](https://cve.now/CVE-2026-66074.md): RabbitMQ: ReDoS via management API ?name= filter (CVSS 6.0)
- [CVE-2026-67232](https://cve.now/CVE-2026-67232.md): RabbitMQ: Web-MQTT decompression bomb (CVSS 8.2)
- [CVE-2026-67405](https://cve.now/CVE-2026-67405.md): RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation) (CVSS 5.3)
- [CVE-2026-66075](https://cve.now/CVE-2026-66075.md): RabbitMQ: Monitoring-tag user can restart federation links (CVSS 2.3)
- [CVE-2026-67219](https://cve.now/CVE-2026-67219.md): RabbitMQ: Consistent-hash exchange unbounded weight (CVSS 6.0)
- [CVE-2026-67228](https://cve.now/CVE-2026-67228.md): RabbitMQ: Atom exhaustion: to\_atom on runtime-parameter component (CVSS 6.9)
- [CVE-2026-67235](https://cve.now/CVE-2026-67235.md): RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size (CVSS 7.1)
- [CVE-2026-66068](https://cve.now/CVE-2026-66068.md): RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs (CVSS 5.6)
- [CVE-2026-67229](https://cve.now/CVE-2026-67229.md): RabbitMQ: Admin-only atom exhaustion: atomize\_keys on vhost metadata (CVSS 6.9)
- [CVE-2026-66080](https://cve.now/CVE-2026-66080.md): RabbitMQ: Super-stream partitions unbounded allocation (CVSS 5.9)
- [CVE-2026-67240](https://cve.now/CVE-2026-67240.md): RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard (CVSS 2.3)
- [CVE-2026-66072](https://cve.now/CVE-2026-66072.md): RabbitMQ: Atom table exhaustion via stream \`chunk\_selector\` (CVSS 6.0)
- [CVE-2026-66067](https://cve.now/CVE-2026-66067.md): RabbitMQ: Stream protocol skips per vhost per user connection limits (CVSS 6.0)
- [CVE-2026-66069](https://cve.now/CVE-2026-66069.md): RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics (CVSS 2.3)
- [CVE-2026-67404](https://cve.now/CVE-2026-67404.md): RabbitMQ: OAuth2 silent verify\_none fallback for JWKS fetch (CVSS 9.2)
- [CVE-2026-67220](https://cve.now/CVE-2026-67220.md): RabbitMQ: JMS topic exchange erl\_scan atom exhaustion (CVSS 6.0)
- [CVE-2026-67224](https://cve.now/CVE-2026-67224.md): RabbitMQ: Admin path-traversal write via trace name (CVSS 2.1)
- [CVE-2026-66077](https://cve.now/CVE-2026-66077.md): RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI (CVSS 7.3)
- [CVE-2026-66079](https://cve.now/CVE-2026-66079.md): RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS (CVSS 8.2)
- [CVE-2026-66070](https://cve.now/CVE-2026-66070.md): RabbitMQ: CORS \* reflects Origin with Allow-Credentials (CVSS 7.6)
- [CVE-2026-67238](https://cve.now/CVE-2026-67238.md): RabbitMQ: Atom-table exhaustion via reply-to queue name decoding (CVSS 7.1)
- [CVE-2026-66076](https://cve.now/CVE-2026-66076.md): RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure (CVSS 2.3)
- [CVE-2026-75516](https://cve.now/CVE-2026-75516.md): RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement (CVSS 8.7)
- [CVE-2026-77409](https://cve.now/CVE-2026-77409.md): RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking (CVSS 8.2)
- [CVE-2026-77411](https://cve.now/CVE-2026-77411.md): RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr (CVSS 9.5)
- [CVE-2026-77412](https://cve.now/CVE-2026-77412.md): RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client (CVSS 8.9)
- [CVE-2026-77405](https://cve.now/CVE-2026-77405.md): RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser (CVSS 9.4)
- [CVE-2026-77404](https://cve.now/CVE-2026-77404.md): RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection (CVSS 8.7)
- [CVE-2026-77410](https://cve.now/CVE-2026-77410.md): RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation (CVSS 8.9)
- [CVE-2026-77406](https://cve.now/CVE-2026-77406.md): RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration (CVSS 8.2)
- [CVE-2026-77403](https://cve.now/CVE-2026-77403.md): RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation (CVSS 8.9)
- [CVE-2026-77407](https://cve.now/CVE-2026-77407.md): RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields (CVSS 7.0)
- [CVE-2026-77408](https://cve.now/CVE-2026-77408.md): RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow (CVSS 9.1)
- [CVE-2026-79921](https://cve.now/CVE-2026-79921.md): amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload (CVSS 8.9)
- [CVE-2026-61634](https://cve.now/CVE-2026-61634.md): RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame\_max (CVSS 0.0)
- [CVE-2026-63336](https://cve.now/CVE-2026-63336.md): RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM (CVSS 5.1)
- [CVE-2026-63337](https://cve.now/CVE-2026-63337.md): RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading (CVSS 7.5)
- [CVE-2026-69220](https://cve.now/CVE-2026-69220.md): RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS (CVSS 8.7)
- [CVE-2026-69219](https://cve.now/CVE-2026-69219.md): RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation (CVSS 8.7)
- [CVE-2026-63335](https://cve.now/CVE-2026-63335.md): RabbitMQ Java client malformed body frame triggers raw command assembler exception (CVSS 6.3)
- [CVE-2026-57217](https://cve.now/CVE-2026-57217.md): RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass (CVSS 7.0)
- [CVE-2026-57221](https://cve.now/CVE-2026-57221.md): RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users (CVSS 5.3)
- [CVE-2026-57215](https://cve.now/CVE-2026-57215.md): RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (CVSS 7.0)
- [CVE-2026-57219](https://cve.now/CVE-2026-57219.md): RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations (CVSS 8.7)
- [CVE-2026-57218](https://cve.now/CVE-2026-57218.md): RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure (CVSS 4.9)
- [CVE-2026-57216](https://cve.now/CVE-2026-57216.md): RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks (CVSS 6.8)
- [CVE-2026-57220](https://cve.now/CVE-2026-57220.md): RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS (CVSS 7.5)
- [CVE-2026-57214](https://cve.now/CVE-2026-57214.md): RabbitMQ: Stored XSS in RabbitMQ management UI (CVSS 7.1)
- [CVE-2026-57211](https://cve.now/CVE-2026-57211.md): RabbitMQ: UNC SSRF affecting the management UI on Windows (CVSS 6.5)
- [CVE-2026-57212](https://cve.now/CVE-2026-57212.md): RabbitMQ management HTTP API accepts request bodies larger than configured max\_http\_body\_size (CVSS 7.1)
- [CVE-2026-57213](https://cve.now/CVE-2026-57213.md): RabbitMQ: Stored XSS federation management plugin via unsanitized consumer\_tag rendering (CVSS 5.7)
- [CVE-2026-44839](https://cve.now/CVE-2026-44839.md): RabbitMQ: Unsanitized vhost names allow for XSS in management UI (CVSS 5.6)
- [CVE-2026-44838](https://cve.now/CVE-2026-44838.md): RabbitMQ MQTT Topic Permission Authorization Bypass (CVSS 5.3)
- [CVE-2025-50200](https://cve.now/CVE-2025-50200.md): RabbitMQ Node can log Basic Auth header from an HTTP request (CVSS 6.7)
- [CVE-2025-30219](https://cve.now/CVE-2025-30219.md): RabbitMQ has XSS Vulnerability in an Error Message in Management UI (CVSS 6.1)
- [CVE-2024-51988](https://cve.now/CVE-2024-51988.md): HTTP API's queue deletion endpoint does not verify that the user has a required permission (CVSS 6.5)
- [CVE-2023-46118](https://cve.now/CVE-2023-46118.md): Denial of Service by publishing large messages over the HTTP API (CVSS 4.9)
- [CVE-2023-46120](https://cve.now/CVE-2023-46120.md): RabbitMQ Java client's lack of message size limitation leads to remote DoS attack (CVSS 4.9)
- [CVE-2022-31008](https://cve.now/CVE-2022-31008.md): Predictable credential obfuscation seed value used in rabbitmq-server (CVSS 5.5)
- [CVE-2021-32719](https://cve.now/CVE-2021-32719.md): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin (CVSS 3.1)
- [CVE-2021-32718](https://cve.now/CVE-2021-32718.md): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI (CVSS 3.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/rabbitmq
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.