CVE-2026-67234

A flaw was found in rabbitmq-server. When clearing authentication preferences, the server generates a non-compliant cookie name containing invalid characters that standard web browsers reject when attempting deletion. This issue prevents the browser from properly removing the cookie, allowing sta...

CVE-2026-67234

The messaging broker RabbitMQ is vulnerable in versions 4.2.0 through 4.2.8 and 4.3.2 due to a flaw in the get_auth_mechanism/1 function. When clearing the strict_auth_mechanism or preferred_auth_mechanism atom, the software used term_to_binary/1, resulting in a non-ASCII cookie name that violate...

rabbitmq-server: rabbitmq-server: Authentication preference persistence via invalid cookie name

A flaw was found in rabbitmq-server. When clearing authentication preferences, the server generates a non-compliant cookie name containing invalid characters that standard web browsers reject when attempting deletion. This issue prevents the browser from properly removing the cookie, allowing sta...