Signals
Back to database
Track25Medium4.5VulnerabilityCVE-2026-67421Patch link available

CVE-2026-67421 — RabbitMQ is a messaging and streaming broker.

Published Sep 25, 2026, 05:17 PM UTCIngested 13d agoSource NVD(cve-db)CVE-2026-67421

Description

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an attacker with queue configure permission, a management administrator who can see but cannot read that queue, and the administrator clicking Get Message(s). A queue name containing a base element can then retarget the automatic relative refresh because the Content Security Policy omits base-uri and connect-src, and an attacker endpoint that permits the management origin through CORS can receive the victim's Authorization header. This issue is fixed in versions 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5.

CVSS v4.0 base metrics

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
4.5

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

AT

Present

Attack Requirements

PR

Low

Privileges Required

UI

Active

User Interaction

VC

Low

Confidentiality (Vulnerable System)

VI

Low

Integrity (Vulnerable System)

VA

None

Availability (Vulnerable System)

SC

High

Confidentiality (Subsequent System)

SI

Low

Integrity (Subsequent System)

SA

None

Availability (Subsequent System)

Affected

Vendor
broadcom
Product
rabbitmq server

Versions

  • >= 3.13.0, < 3.13.9
  • >= 4.0.0, < 4.0.24
  • >= 4.1.0, < 4.1.15
  • >= 4.2.0, < 4.2.10
  • >= 4.3.0, < 4.3.5

Stated as the source expressed them.

References

Related threats

same CWE or vendor
Medium

CVE-2026-107792 — Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows authe…

CVE-2026-107792 · 1h ago

High

CVE-2026-107725 — Hazelcast is a unified real-time data platform combining stream processing with a fast data store.

CVE-2026-107725 · 1h ago

Medium

CVE-2026-107395 — Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.

CVE-2026-107395 · 3h ago

High

CVE-2026-93860 — In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly witho…

CVE-2026-93860 · 5h ago

Medium

CVE-2026-12859 — Missing Authorization vulnerability in Caz Informatics Services Trade Inc.

CVE-2026-12859 · 8h ago

Medium

CVE-2026-107623 — A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak.

CVE-2026-107623 · 8h ago