What’s Vulnerable › Products

rabbitmq-server vulnerabilities

84 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 73 published in the last 12 months.

Check whether your rabbitmq-server version is affected

Latest rabbitmq-server vulnerabilities

• CVE-2026-67418 — RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers (CVSS 5.3)
• CVE-2026-67416 — RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation (CVSS 5.3)
• CVE-2026-67414 — RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation (CVSS 6.0)
• CVE-2026-67421 — RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling (CVSS 6.8)
• CVE-2026-67420 — RabbitMQ OAuth credential refresh retains revoked runtime tags (CVSS 6.5)
• CVE-2026-67419 — RabbitMQ: Consecutive topic wildcards cause combinatorial routing work (CVSS 6.5)
• CVE-2026-67415 — RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service (CVSS 4.9)
• CVE-2026-67413 — RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression (CVSS 6.5)
• CVE-2026-67412 — RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access (CVSS 7.1)
• CVE-2026-67411 — RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass (CVSS 7.1)
• CVE-2026-67410 — RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CVSS 7.1)
• CVE-2026-67409 — RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS (CVSS 6.5)
• CVE-2026-67408 — RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service (CVSS 6.5)
• CVE-2026-67407 — RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass (CVSS 7.1)
• CVE-2026-67406 — RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status (CVSS 6.5)
• CVE-2026-67242 — RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp (CVSS 5.4)
• CVE-2026-67241 — RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check (CVSS 6.5)
• CVE-2026-67239 — RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI (CVSS 5.4)
• CVE-2026-67237 — RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint (CVSS 9.3)
• CVE-2026-67234 — RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference (CVSS 4.3)
• CVE-2026-67230 — RabbitMQ: Web-STOMP unbounded pre-auth accumulation (CVSS 7.5)
• CVE-2026-67227 — RabbitMQ: Atom exhaustion: to_atom on global-parameter :name (CVSS 4.9)
• CVE-2026-67226 — RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list (CVSS 4.9)
• CVE-2026-67225 — RabbitMQ: Stream-protocol frame length never validated against frame_max (CVSS 7.5)
• CVE-2026-67223 — RabbitMQ: LDAP DN injection via unescaped substitution (CVSS 7.1)