Rabbitmq vulnerabilities
100 CVEs and advisories name Rabbitmq as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-66076RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
- CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
- CVE-2026-77409RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking
- CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr
- CVE-2026-77412RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client
- CVE-2026-77405RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser
- CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection
- CVE-2026-77410RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation
- CVE-2026-77406RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
- CVE-2026-77403RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation
- CVE-2026-77407RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields
- CVE-2026-77408RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow
- CVE-2026-79921amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload
- CVE-2026-61634RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max
- CVE-2026-63336RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
- CVE-2026-63337RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading
- CVE-2026-69220RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
- CVE-2026-69219RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
- CVE-2026-63335RabbitMQ Java client malformed body frame triggers raw command assembler exception
- CVE-2026-57217RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
- CVE-2026-57221RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users
- CVE-2026-57215RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom
- CVE-2026-57219RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
- CVE-2026-57218RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
- CVE-2026-57216RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
- CVE-2026-57220RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS
- CVE-2026-57214RabbitMQ: Stored XSS in RabbitMQ management UI
- CVE-2026-57211RabbitMQ: UNC SSRF affecting the management UI on Windows
- CVE-2026-57212RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size
- CVE-2026-57213RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering