CVE-2026-25768

CVE-2026-25768 affects LavinMQ prior to 2.6.6, where an authenticated user could access broker metadata they should not access. The issue is a authorization flaw in the broker exposing sensitive metadata. The vulnerability is fixed in 2.6.6; affected deployments should upgrade to 2.6.6 or newer t...