CVE-2026-57221 RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users

🗓️ 10 Jul 2026 20:24:27Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2026-57221: Passive queue and exchange declare bypasses authorization, exposing queue metadata to unprivileged users.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-57221	10 Jul 202620:24	–	attackerkb
Circl	CVE-2026-57221	11 Jul 202602:32	–	circl
CVE	CVE-2026-57221	10 Jul 202620:24	–	cve
Cvelist	CVE-2026-57221 RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users	10 Jul 202620:24	–	cvelist
EUVD	EUVD-2026-43023	10 Jul 202620:24	–	euvd
NVD	CVE-2026-57221	10 Jul 202621:16	–	nvd
OSV	UBUNTU-CVE-2026-57221	13 Jul 202600:00	–	osv
Positive Technologies	PT-2026-57306	10 Jul 202600:00	–	ptsecurity
The Hacker News	RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata	14 Jul 202613:48	–	thn
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-57221	13 Jul 202600:00	–	nessus

Source	Link
github	www.github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57221.json
github	www.github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9q2j-2hq8-22r2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-57221
github	www.github.com/rabbitmq/rabbitmq-server/commit/709a14e49e06c138a8cd672c9809ca34a2767962
github	www.github.com/rabbitmq/rabbitmq-server/commit/dc3d1aa4f5c3331a425ee599b45be9423a2e83fc
github	www.github.com/rabbitmq/rabbitmq-server/pull/16085
github	www.github.com/rabbitmq/rabbitmq-server/pull/16090

14 Jul 2026 03:56Current

6.1Medium risk

Vulners AI Score6.1

CVSS 45.3

EPSS0.00269