Advisories · Technology
rabbitmq-server.
Every CVE that names rabbitmq-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
- rabbitmq-server
- CWE-248
- CWE-1286
- CVSS 6.0 Medium
RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation
- rabbitmq-server
- Denial of service
- CVSS 5.3 Medium
RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
- rabbitmq-server
- CWE-20
- CWE-248
- CVSS 2.3 Low
RabbitMQ OAuth credential refresh retains revoked runtime tags
- rabbitmq-server
- Broken access control
- CVSS 7.1 High
RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
- rabbitmq-server
- Denial of service
- CVSS 4.5 Medium
RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
- rabbitmq-server
- Broken access control
- CVSS 7.1 High
RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
- rabbitmq-server
- Denial of service
- CVSS 4.6 Medium
RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status
- rabbitmq-server
- Information disclosure
- CVSS 8.2 High
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
- rabbitmq-server
- Information disclosure
- CVSS 5.9 Medium
RabbitMQ: Atom exhaustion: to_atom on global-parameter :name
- rabbitmq-server
- Denial of service
- CVSS 5.1 Medium
RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
- rabbitmq-server
- Broken access control
- CVSS 6.9 Medium
RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list
- rabbitmq-server
- Denial of service
- CVSS 6.0 Medium
RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
- rabbitmq-server
- Broken access control
- CVSS 6.0 Medium
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
- rabbitmq-server
- Denial of service
- CVSS 6.3 Medium
RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks
- rabbitmq-server
- Broken access control
- CVSS 5.9 Medium
RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
- rabbitmq-server
- Denial of service
- CVSS 6.0 Medium
RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
- rabbitmq-server
- Broken access control
- CVSS 8.2 High
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
- rabbitmq-server
- CWE-252
- CVSS 6.3 Medium
RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp
- rabbitmq-server
- Authentication bypass
- CVSS 6.3 Medium
RabbitMQ: LDAP DN injection via unescaped substitution
- rabbitmq-server
- Other injection
- CVSS 7.6 High
RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check
- rabbitmq-server
- Broken access control
- CVSS 6.0 Medium
RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
- rabbitmq-server
- Denial of service
- CVSS 2.1 Low
RabbitMQ: protected tag bypass via bulk-delete
- rabbitmq-server
- Broken access control
- CVSS 6.0 Medium
RabbitMQ: Atom table exhaustion via management API node field
- rabbitmq-server
- Denial of service
- CVSS 7.5 High
RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 2.3 Low
RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference
- rabbitmq-server
- CWE-20
- CVSS 6.3 Medium
RabbitMQ: Stream-protocol frame length never validated against frame_max
- rabbitmq-server
- Denial of service
- CVSS 6.3 Medium
RabbitMQ: Web-STOMP unbounded pre-auth accumulation
- rabbitmq-server
- Denial of service
- CVSS 5.9 Medium
RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client
- rabbitmq-server
- Denial of service
- CVSS 8.2 High
RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login
- rabbitmq-server
- Information disclosure
- CVSS 6.0 Medium
RabbitMQ: Monitoring-tag user can DELETE shovels
- rabbitmq-server
- Broken access control
- CVSS 5.9 Medium
RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords
- rabbitmq-server
- Information disclosure
- CVSS 9.1 CriticalCritical · CVSS 9+
RabbitMQ: Trust-store whitelist by Issuer+Serial only
- rabbitmq-server
- Weak cryptography or TLS
- CVSS 2.1 Low
RabbitMQ: Super-stream HTTP creation skips configure-permission check
- rabbitmq-server
- Broken access control
- CVSS 6.0 Medium
RabbitMQ: ReDoS via management API ?name= filter
- rabbitmq-server
- Denial of service
- CVSS 8.2 High
RabbitMQ: Web-MQTT decompression bomb
- rabbitmq-server
- CWE-409
- CVSS 5.3 Medium
RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)
- rabbitmq-server
- CWE-1385
- CVSS 2.3 Low
RabbitMQ: Monitoring-tag user can restart federation links
- rabbitmq-server
- Broken access control
- CVSS 6.0 Medium
RabbitMQ: Consistent-hash exchange unbounded weight
- rabbitmq-server
- Denial of service
- CVSS 6.9 Medium
RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component
- rabbitmq-server
- Denial of service
- CVSS 7.1 High
RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size
- rabbitmq-server
- Denial of service
- CVSS 5.6 Medium
RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs
- rabbitmq-server
- Information disclosure
- CVSS 6.9 Medium
RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata
- rabbitmq-server
- Denial of service
- CVSS 5.9 Medium
RabbitMQ: Super-stream partitions unbounded allocation
- rabbitmq-server
- Denial of service
- CVSS 2.3 Low
RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard
- rabbitmq-server
- Denial of service
- CVSS 6.0 Medium
RabbitMQ: Atom table exhaustion via stream `chunk_selector`
- rabbitmq-server
- Denial of service
- CVSS 6.0 Medium
RabbitMQ: Stream protocol skips per vhost per user connection limits
- rabbitmq-server
- Denial of service
- CVSS 2.3 Low
RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics
- rabbitmq-server
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
- rabbitmq-server
- Weak cryptography or TLS
- CVSS 6.0 Medium
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
- rabbitmq-server
- Denial of service
- CVSS 2.1 Low
RabbitMQ: Admin path-traversal write via trace name
- rabbitmq-server
- Path traversal
- CVSS 7.3 High
RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 8.2 High
RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS
- rabbitmq-server
- Denial of service
- CVSS 7.6 High
RabbitMQ: CORS * reflects Origin with Allow-Credentials
- rabbitmq-server
- CWE-942
- CVSS 7.1 High
RabbitMQ: Atom-table exhaustion via reply-to queue name decoding
- rabbitmq-server
- Denial of service
- CVSS 2.3 Low
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
- rabbitmq-server
- Broken access control
- CVSS 7.0 High
RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
- rabbitmq-server
- Broken access control
- CVSS 5.3 Medium
RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users
- rabbitmq-server
- Broken access control
- CVSS 7.0 High
RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom
- rabbitmq-server
- Broken access control