# rabbitmq-server.

Every CVE that names rabbitmq-server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers](https://agentprime.io/advisories/CVE-2026-67418.md)
  `CVE-2026-67418` · CVE record: rabbitmq rabbitmq-server · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-248, CWE-1286
- [RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation](https://agentprime.io/advisories/CVE-2026-67414.md)
  `CVE-2026-67414` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation](https://agentprime.io/advisories/CVE-2026-67416.md)
  `CVE-2026-67416` · CVE record: rabbitmq rabbitmq-server · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-20, CWE-248, CWE-754
- [RabbitMQ OAuth credential refresh retains revoked runtime tags](https://agentprime.io/advisories/CVE-2026-67420.md)
  `CVE-2026-67420` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Consecutive topic wildcards cause combinatorial routing work](https://agentprime.io/advisories/CVE-2026-67419.md)
  `CVE-2026-67419` · CVE record: rabbitmq rabbitmq-server · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling](https://agentprime.io/advisories/CVE-2026-67421.md)
  `CVE-2026-67421` · CVE record: rabbitmq rabbitmq-server · CVSS 4.5 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service](https://agentprime.io/advisories/CVE-2026-67408.md)
  `CVE-2026-67408` · CVE record: rabbitmq rabbitmq-server · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status](https://agentprime.io/advisories/CVE-2026-67406.md)
  `CVE-2026-67406` · CVE record: rabbitmq rabbitmq-server · CVSS 4.6 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Information disclosure
- [RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint](https://agentprime.io/advisories/CVE-2026-67410.md)
  `CVE-2026-67410` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 25 Sept 2026 · Tags: Information disclosure
- [RabbitMQ: Atom exhaustion: to_atom on global-parameter :name](https://agentprime.io/advisories/CVE-2026-67227.md)
  `CVE-2026-67227` · CVE record: rabbitmq rabbitmq-server · CVSS 5.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Incomplete fix for CVE-2026-44838: \`escape_regex_char/1\` does not escape \`-\`, leaving room for an MQTT topic permission bypass](https://agentprime.io/advisories/CVE-2026-67407.md)
  `CVE-2026-67407` · CVE record: rabbitmq rabbitmq-server · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list](https://agentprime.io/advisories/CVE-2026-67226.md)
  `CVE-2026-67226` · CVE record: rabbitmq rabbitmq-server · CVSS 6.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass](https://agentprime.io/advisories/CVE-2026-67411.md)
  `CVE-2026-67411` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression](https://agentprime.io/advisories/CVE-2026-67413.md)
  `CVE-2026-67413` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: AMQP 1.0 management \`GET /bindings\` exposes full binding topology to any authenticated AMQP user without resource/management permission checks](https://agentprime.io/advisories/CVE-2026-61837.md)
  `CVE-2026-61837` · CVE record: rabbitmq rabbitmq-server · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service](https://agentprime.io/advisories/CVE-2026-67415.md)
  `CVE-2026-67415` · CVE record: rabbitmq rabbitmq-server · CVSS 5.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access](https://agentprime.io/advisories/CVE-2026-67412.md)
  `CVE-2026-67412` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS](https://agentprime.io/advisories/CVE-2026-67409.md)
  `CVE-2026-67409` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-252
- [RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp](https://agentprime.io/advisories/CVE-2026-67242.md)
  `CVE-2026-67242` · CVE record: rabbitmq rabbitmq-server · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass
- [RabbitMQ: LDAP DN injection via unescaped substitution](https://agentprime.io/advisories/CVE-2026-67223.md)
  `CVE-2026-67223` · CVE record: rabbitmq rabbitmq-server · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Other injection
- [RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI](https://agentprime.io/advisories/CVE-2026-67239.md)
  `CVE-2026-67239` · CVE record: rabbitmq rabbitmq-server · CVSS 7.6 High · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS)
- [RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check](https://agentprime.io/advisories/CVE-2026-67241.md)
  `CVE-2026-67241` · CVE record: rabbitmq rabbitmq-server · CVSS 4.8 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values](https://agentprime.io/advisories/CVE-2026-66071.md)
  `CVE-2026-66071` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: protected tag bypass via bulk-delete](https://agentprime.io/advisories/CVE-2026-66078.md)
  `CVE-2026-66078` · CVE record: rabbitmq rabbitmq-server · CVSS 2.1 Low · Not analysed yet · Published 25 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Atom table exhaustion via management API node field](https://agentprime.io/advisories/CVE-2026-66073.md)
  `CVE-2026-66073` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint](https://agentprime.io/advisories/CVE-2026-67237.md)
  `CVE-2026-67237` · CVE record: rabbitmq rabbitmq-server · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS)
- [RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference](https://agentprime.io/advisories/CVE-2026-67234.md)
  `CVE-2026-67234` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-20
- [RabbitMQ: Stream-protocol frame length never validated against frame_max](https://agentprime.io/advisories/CVE-2026-67225.md)
  `CVE-2026-67225` · CVE record: rabbitmq rabbitmq-server · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Web-STOMP unbounded pre-auth accumulation](https://agentprime.io/advisories/CVE-2026-67230.md)
  `CVE-2026-67230` · CVE record: rabbitmq rabbitmq-server · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client](https://agentprime.io/advisories/CVE-2026-67222.md)
  `CVE-2026-67222` · CVE record: rabbitmq rabbitmq-server · CVSS 5.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login](https://agentprime.io/advisories/CVE-2026-67236.md)
  `CVE-2026-67236` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 25 Sept 2026 · Tags: Information disclosure
- [RabbitMQ: Monitoring-tag user can DELETE shovels](https://agentprime.io/advisories/CVE-2026-67233.md)
  `CVE-2026-67233` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Broken access control
- [RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords](https://agentprime.io/advisories/CVE-2026-67221.md)
  `CVE-2026-67221` · CVE record: rabbitmq rabbitmq-server · CVSS 5.9 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Information disclosure
- [RabbitMQ: Trust-store whitelist by Issuer+Serial only](https://agentprime.io/advisories/CVE-2026-67231.md)
  `CVE-2026-67231` · CVE record: rabbitmq rabbitmq-server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS
- [RabbitMQ: Super-stream HTTP creation skips configure-permission check](https://agentprime.io/advisories/CVE-2026-67218.md)
  `CVE-2026-67218` · CVE record: rabbitmq rabbitmq-server · CVSS 2.1 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control
- [RabbitMQ: ReDoS via management API ?name= filter](https://agentprime.io/advisories/CVE-2026-66074.md)
  `CVE-2026-66074` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Web-MQTT decompression bomb](https://agentprime.io/advisories/CVE-2026-67232.md)
  `CVE-2026-67232` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-409
- [RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)](https://agentprime.io/advisories/CVE-2026-67405.md)
  `CVE-2026-67405` · CVE record: rabbitmq rabbitmq-server · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-1385
- [RabbitMQ: Monitoring-tag user can restart federation links](https://agentprime.io/advisories/CVE-2026-66075.md)
  `CVE-2026-66075` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Consistent-hash exchange unbounded weight](https://agentprime.io/advisories/CVE-2026-67219.md)
  `CVE-2026-67219` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component](https://agentprime.io/advisories/CVE-2026-67228.md)
  `CVE-2026-67228` · CVE record: rabbitmq rabbitmq-server · CVSS 6.9 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size](https://agentprime.io/advisories/CVE-2026-67235.md)
  `CVE-2026-67235` · CVE record: rabbitmq rabbitmq-server · CVSS 7.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs](https://agentprime.io/advisories/CVE-2026-66068.md)
  `CVE-2026-66068` · CVE record: rabbitmq rabbitmq-server · CVSS 5.6 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Information disclosure
- [RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata](https://agentprime.io/advisories/CVE-2026-67229.md)
  `CVE-2026-67229` · CVE record: rabbitmq rabbitmq-server · CVSS 6.9 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Super-stream partitions unbounded allocation](https://agentprime.io/advisories/CVE-2026-66080.md)
  `CVE-2026-66080` · CVE record: rabbitmq rabbitmq-server · CVSS 5.9 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard](https://agentprime.io/advisories/CVE-2026-67240.md)
  `CVE-2026-67240` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Atom table exhaustion via stream \`chunk_selector\`](https://agentprime.io/advisories/CVE-2026-66072.md)
  `CVE-2026-66072` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Stream protocol skips per vhost per user connection limits](https://agentprime.io/advisories/CVE-2026-66067.md)
  `CVE-2026-66067` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics](https://agentprime.io/advisories/CVE-2026-66069.md)
  `CVE-2026-66069` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control
- [RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch](https://agentprime.io/advisories/CVE-2026-67404.md)
  `CVE-2026-67404` · CVE record: rabbitmq rabbitmq-server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS
- [RabbitMQ: JMS topic exchange erl_scan atom exhaustion](https://agentprime.io/advisories/CVE-2026-67220.md)
  `CVE-2026-67220` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Admin path-traversal write via trace name](https://agentprime.io/advisories/CVE-2026-67224.md)
  `CVE-2026-67224` · CVE record: rabbitmq rabbitmq-server · CVSS 2.1 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Path traversal
- [RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI](https://agentprime.io/advisories/CVE-2026-66077.md)
  `CVE-2026-66077` · CVE record: rabbitmq rabbitmq-server · CVSS 7.3 High · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site scripting (XSS)
- [RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS](https://agentprime.io/advisories/CVE-2026-66079.md)
  `CVE-2026-66079` · CVE record: rabbitmq rabbitmq-server · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: CORS \* reflects Origin with Allow-Credentials](https://agentprime.io/advisories/CVE-2026-66070.md)
  `CVE-2026-66070` · CVE record: rabbitmq rabbitmq-server · CVSS 7.6 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-942
- [RabbitMQ: Atom-table exhaustion via reply-to queue name decoding](https://agentprime.io/advisories/CVE-2026-67238.md)
  `CVE-2026-67238` · CVE record: rabbitmq rabbitmq-server · CVSS 7.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure](https://agentprime.io/advisories/CVE-2026-66076.md)
  `CVE-2026-66076` · CVE record: rabbitmq rabbitmq-server · CVSS 2.3 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control
- [RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass](https://agentprime.io/advisories/CVE-2026-57217.md)
  `CVE-2026-57217` · CVE record: rabbitmq rabbitmq-server · CVSS 7.0 High · Not analysed yet · Published 10 Jul 2026 · Tags: Broken access control
- [RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users](https://agentprime.io/advisories/CVE-2026-57221.md)
  `CVE-2026-57221` · CVE record: rabbitmq rabbitmq-server · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Broken access control
- [RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom](https://agentprime.io/advisories/CVE-2026-57215.md)
  `CVE-2026-57215` · CVE record: rabbitmq rabbitmq-server · CVSS 7.0 High · Not analysed yet · Published 10 Jul 2026 · Tags: Broken access control

Older: <https://agentprime.io/advisories/technology/rabbitmq-server.md?cursor=WyIyMDI2LTA3LTEwVDIwOjIzOjI2LjEzMjAwMFoiLCJDVkUtMjAyNi01NzIxNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=rabbitmq-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/rabbitmq-server/>. Everything for agents: <https://agentprime.io/llms.txt>.