Rabbitmq vulnerabilities
100 CVEs and advisories name Rabbitmq as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44839RabbitMQ: Unsanitized vhost names allow for XSS in management UI
- CVE-2026-44838RabbitMQ MQTT Topic Permission Authorization Bypass
- CVE-2025-50200RabbitMQ Node can log Basic Auth header from an HTTP request
- CVE-2025-30219RabbitMQ has XSS Vulnerability in an Error Message in Management UI
- CVE-2024-51988HTTP API's queue deletion endpoint does not verify that the user has a required permission
- CVE-2023-46118Denial of Service by publishing large messages over the HTTP API
- CVE-2023-46120RabbitMQ Java client's lack of message size limitation leads to remote DoS attack
- CVE-2022-31008Predictable credential obfuscation seed value used in rabbitmq-server
- CVE-2021-32719Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin
- CVE-2021-32718Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI