Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

rabbitmq-server — Vulnerabilities & Security Advisories 74

All 74 CVE vulnerabilities found in rabbitmq-server, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities affecting the rabbitmq-server product, specifically focusing on Common Weakness Enumerations relevant to this message broker software. It aggregates known security issues, configuration flaws, and implementation errors discovered in the open-source messaging platform developed by VMware and maintained by the RabbitMQ community. The content encompasses vulnerability records spanning from early releases in 2007 through the latest stable versions released in 2024, ensuring comprehensive historical coverage and up-to-date risk assessment capabilities. Visitors to this resource can track vendor advisories issued by the RabbitMQ project team and official security channels to understand the context and severity of each disclosed issue. Users can also analyze specific weakness classes such as cross-site scripting, injection flaws, or insecure default configurations to comprehend how these generic weaknesses manifest within the RabbitMQ architecture. Furthermore, the page enables users to look up a product's vulnerability history, allowing for the identification of trends, recurring security patterns, and the effectiveness of past mitigation efforts. This structured overview supports security professionals, developers, and system administrators in evaluating the risk posture of their RabbitMQ deployments and prioritizing remediation activities based on verified data rather than speculative reports. By centralizing this information, the page serves as a critical reference for maintaining the integrity and reliability of messaging infrastructure that relies on RabbitMQ for inter-process communication and event-driven architectures.

Vendor: rabbitmq

CVE ID Title CVSS Severity Published
CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS CWE-770 7.5 High 2026-07-10
CVE-2026-57214 RabbitMQ: Stored XSS in RabbitMQ management UI CWE-79 - - 2026-07-10
CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows CWE-36 6.5 Medium 2026-07-10
CVE-2026-57212 RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size CWE-770 - - 2026-07-10
CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering CWE-79 - - 2026-07-10
CVE-2026-44839 RabbitMQ: Unsanitized vhost names allow for XSS in management UI CWE-80 - - 2026-05-27
CVE-2026-44838 RabbitMQ MQTT Topic Permission Authorization Bypass CWE-863 - - 2026-05-27
CVE-2025-50200 RabbitMQ Node can log Basic Auth header from an HTTP request CWE-532 6.8AI Medium AI 2025-06-19
CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI CWE-79 6.1 Medium 2025-03-25
CVE-2024-51988 HTTP API's queue deletion endpoint does not verify that the user has a required permission CWE-284 6.5 Medium 2024-11-06
CVE-2023-46118 Denial of Service by publishing large messages over the HTTP API CWE-400 4.9 Medium 2023-10-24
CVE-2022-31008 Predictable credential obfuscation seed value used in rabbitmq-server CWE-330 5.5 Medium 2022-10-06
CVE-2021-32719 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin CWE-80 3.1 Low 2021-06-28
CVE-2021-32718 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI CWE-80 3.1 Low 2021-06-28

All 74 known CVE vulnerabilities affecting rabbitmq-server with full Chinese analysis, references, and POCs where available.