Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

rabbitmq — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting rabbitmq. AI-powered Chinese analysis, POCs, and references for each vulnerability.

RabbitMQ serves as a widely adopted message broker for enterprise messaging and queuing systems, enabling reliable communication between distributed applications. Historically, it has been susceptible to remote code execution vulnerabilities through deserialization flaws, cross-site scripting in management interfaces, and privilege escalation via authentication bypasses. The platform's default configurations often present attack surfaces, with past incidents including unauthorized access through exposed management consoles and credential stuffing attacks. While RabbitMQ maintains a relatively low CVE count compared to similar systems, its complex architecture requires careful hardening to prevent exploitation of common misconfigurations and access control weaknesses.

Found 1 results / 21Clear Filters
High2026-07-11
AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure · Advisory ·
Unknown2026-07-11
AMQP 0-9-1: clear permissions cache and re-check when secret changes · rabbitmq/rabbitmq-server@501ad94 · GitHub
High2026-07-11
AMQP 0-9-1: clear permissions cache and re-check when secret changes · rabbitmq/rabbitmq-server@db20d6c · GitHub
High2026-07-11
Limit heap size for unauthenticated connections by ansd · Pull Request #16171 · rabbitmq/rabbitmq-server · GitHub
Unknown2026-07-11
Release RabbitMQ 4.2.6 · rabbitmq/rabbitmq-server · GitHub
High2026-07-11
Limit heap size for unauthenticated connections (backport #16171) (backport #16172) by mergify[bot] · Pull Request #1617
High2026-07-11
Limit heap size for unauthenticated connections · rabbitmq/rabbitmq-server@595ec28 · GitHub
Medium2026-07-11
Limit heap size for unauthenticated connections · rabbitmq/rabbitmq-server@773a49c · GitHub
HighCVE-2025-572142026-07-11
Stored XSS in RabbitMQ management UI · Advisory · rabbitmq/rabbitmq-server · GitHub
High2026-07-11
Release RabbitMQ 4.2.5 · rabbitmq/rabbitmq-server · GitHub
HighCVE-2025-572192026-07-11
Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configu
Low2026-07-11
Remove deprecated endpoint · rabbitmq/rabbitmq-server@98b1daf · GitHub
Low2026-07-11
Remove deprecated endpoint · rabbitmq/rabbitmq-server@aa387c4 · GitHub
High2026-07-11
Stored XSS in RabbitMQ federation management plugin via unsanitized consumer_tag rendering · Advisory · rabbitmq/rabbitm
Unknown2026-07-11
Use `peername/1` over `sockname/1` in a few places by michaelklishin · Pull Request #15936 · rabbitmq/rabbitmq-server ·
Critical2026-07-11
AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loo
Medium2026-07-11
Use `peername/1` over `sockname/1` in a few places · rabbitmq/rabbitmq-server@9f8c39f · GitHub
Medium2026-07-11
Use `peername/1` over `sockname/1` in a few places · rabbitmq/rabbitmq-server@7273c9e · GitHub
HighCVE-2026-572172026-07-11
Topic authorization can lead to cross-tenant routing-key bypass · Advisory · rabbitmq/rabbitmq-server · GitHub
High2026-07-11
Khepri: distinguish missing keys from errors in one place · rabbitmq/rabbitmq-server@94f1d33 · GitHub

Showing up to 20 recent security advisories. View all →

This page lists every published CVE security advisory associated with rabbitmq. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.