Red Hat Security Advisory

RHSA-2026:67552

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-09-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images rabbitmq-server4.3-4.3.6-1.hum1@aarch64, rabbitmq-server4.3-4.3.6-1.hum1@src, rabbitmq-server4.3-4.3.6-1.hum1@x86_64

Fixes 54 records

TI-2026-47695 CVE-2026-67410

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00408 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-200

TI-2026-47694 CVE-2026-67409

RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00418 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-252

TI-2026-47558 CVE-2026-67242

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

HIGH 67

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-25 Partial fix · 4.2.9, 4.3.3 CWE-613

TI-2026-47700 CVE-2026-67419

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-25 Partial fix · 4.3.5 CWE-1333

TI-2026-47693 CVE-2026-67408

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +1 CWE-400

TI-2026-47545 CVE-2026-67229

RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47542 CVE-2026-67226

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +1 CWE-400

TI-2026-44256 CVE-2026-61837

Improper authorization in rabbitmq-server

MEDIUM 61

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-285

TI-2026-47699 CVE-2026-67415

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00383 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-400

TI-2026-47698 CVE-2026-67413

Regular expression denial of service in rabbitmq-server

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-09-25 Partial fix · 4.2.9, 4.1.14 +2 CWE-1333

TI-2026-47697 CVE-2026-67412

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-862

TI-2026-47696 CVE-2026-67411

RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-863

TI-2026-47049 CVE-2026-66072

RabbitMQ: Atom table exhaustion via stream `chunk_selector`

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00473 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +3 CWE-400

TI-2026-47557 CVE-2026-67241

RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check

MEDIUM 55

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.8 Network High privileges No interaction EPSS 0.00425 Published 2026-09-25 Fixed in 4.2.9, 4.3.3 CWE-862

TI-2026-47702 CVE-2026-67421

RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

MEDIUM 54

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.5 Network Low privileges User interaction EPSS 0.0028 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47055 CVE-2026-66078

RabbitMQ: protected tag bypass via bulk-delete

MEDIUM 52

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.0043 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-862

TI-2026-47701 CVE-2026-67420

RabbitMQ OAuth credential refresh retains revoked runtime tags

MEDIUM 47

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47556 CVE-2026-67240

RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard

MEDIUM 45

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-09-23 Partial fix · 4.2.7, 4.3.1 CWE-1333

TI-2026-47053 CVE-2026-66076

RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure

MEDIUM 45

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0033 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-862

TI-2026-47056 CVE-2026-66079

RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS

MEDIUM 42

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00318 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-770

TI-2026-47689 CVE-2026-67404

RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch

MEDIUM 41

RabbitMQ is a messaging and streaming broker.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.002 Published 2026-09-23 Fixed in 3.13.15, 4.0.20 +2 CWE-295

TI-2026-47546 CVE-2026-67230

RabbitMQ: Web-STOMP unbounded pre-auth accumulation

LOW 37

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00583 Published 2026-09-25 Partial fix · 4.2.6, 4.1.11 +2 CWE-770

TI-2026-47548 CVE-2026-67232

RabbitMQ: Web-MQTT decompression bomb

LOW 36

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00394 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-409

TI-2026-47553 CVE-2026-67237

RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint

LOW 35

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00452 Published 2026-09-25 Partial fix · 4.2.8, 4.3.2 CWE-79

TI-2026-47552 CVE-2026-67236

RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login

LOW 35

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00166 Published 2026-09-25 Partial fix · 4.2.8, 4.3.2 CWE-312

TI-2026-47047 CVE-2026-66070

RabbitMQ: CORS * reflects Origin with Allow-Credentials

LOW 35

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00372 Published 2026-09-23 Partial fix · 3.13.17, 4.0.22 +2 CWE-942

TI-2026-47555 CVE-2026-67239

RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

LOW 34

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00154 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-79

TI-2026-47554 CVE-2026-67238

RabbitMQ: Atom-table exhaustion via reply-to queue name decoding

LOW 31

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-23 Partial fix · 4.2.7, 4.3.1 CWE-400

TI-2026-47551 CVE-2026-67235

RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size

LOW 31

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00302 Published 2026-09-23 Partial fix · 4.2.6, 4.1.11 +2 CWE-770

TI-2026-47054 CVE-2026-66077

RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI

LOW 31

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.3 Network Low privileges User interaction EPSS 0.00151 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-79

TI-2026-47544 CVE-2026-67228

RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component

LOW 30

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00316 Published 2026-09-23 Partial fix · 4.2.7, 4.3.1 CWE-400

TI-2026-47541 CVE-2026-67225

RabbitMQ: Stream-protocol frame length never validated against frame_max

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00343 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-770

TI-2026-47539 CVE-2026-67223

RabbitMQ: LDAP DN injection via unescaped substitution

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00357 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-90

TI-2026-47048 CVE-2026-66071

RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00542 Published 2026-09-25 Partial fix · 3.13.15, 4.0.22 +3 CWE-400

TI-2026-47549 CVE-2026-67233

RabbitMQ: Monitoring-tag user can DELETE shovels

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00299 Published 2026-09-24 Partial fix · 3.13.15, 4.0.20 +3 CWE-862

TI-2026-47543 CVE-2026-67227

RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00378 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +2 CWE-400

TI-2026-47536 CVE-2026-67220

RabbitMQ: JMS topic exchange erl_scan atom exhaustion

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00314 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47535 CVE-2026-67219

RabbitMQ: Consistent-hash exchange unbounded weight

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00302 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-770

TI-2026-47051 CVE-2026-66074

RabbitMQ: ReDoS via management API ?name= filter

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-1333

TI-2026-47050 CVE-2026-66073

RabbitMQ: Atom table exhaustion via management API node field

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00471 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47044 CVE-2026-66067

RabbitMQ: Stream protocol skips per vhost per user connection limits

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00437 Published 2026-09-23 Partial fix · 4.2.7, 4.3.1 CWE-770

TI-2026-47538 CVE-2026-67222

RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client

LOW 26

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47537 CVE-2026-67221

RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

LOW 26

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.0019 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-312

TI-2026-47057 CVE-2026-66080

RabbitMQ: Super-stream partitions unbounded allocation

LOW 26

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00316 Published 2026-09-23 Partial fix · 4.1.11, 4.2.6 CWE-770

TI-2026-47045 CVE-2026-66068

RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

LOW 24

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.6 Local High privileges No interaction EPSS 0.00141 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-532

TI-2026-32719 CVE-2026-44839

RabbitMQ: Unsanitized vhost names allow for XSS in management UI

LOW 24

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.6 Network High privileges User interaction EPSS 0.0018 Published 2026-05-27 Partial fix · 4.0.13, 4.1.2 CWE-80

TI-2026-47692 CVE-2026-67407

Missing authorization in rabbitmq-server

LOW 23

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.1 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-862

TI-2026-47690 CVE-2026-67405

RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)

LOW 23

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00111 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-1385

TI-2026-47691 CVE-2026-67406

Information disclosure in rabbitmq-server

LOW 21

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00343 Published 2026-09-25 Fixed in 4.3.3, 4.2.9 +2 CWE-200

TI-2026-47550 CVE-2026-67234

RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference

LOW 12

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00425 Published 2026-09-25 Partial fix · 4.2.8, 4.3.2 CWE-20

TI-2026-47046 CVE-2026-66069

RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

LOW 12

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00303 Published 2026-09-23 Partial fix · 4.1.13, 4.2.7 CWE-862

TI-2026-47540 CVE-2026-67224

RabbitMQ: Admin path-traversal write via trace name

LOW 11

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00355 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +3 CWE-22

TI-2026-47534 CVE-2026-67218

RabbitMQ: Super-stream HTTP creation skips configure-permission check

LOW 11

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00373 Published 2026-09-23 Partial fix · 4.0.22, 4.1.11 +1 CWE-862

TI-2026-47052 CVE-2026-66075

RabbitMQ: Monitoring-tag user can restart federation links

LOW 11

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +3 CWE-862