CVE-2026-44839 RabbitMQ: Unsanitized vhost names allow for XSS in management UI

RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13...

CVE-2026-44839 RabbitMQ: Unsanitized vhost names allow for XSS in management UI

RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13...

CVE-2026-44839

RabbitMQ vulnerability (CVE-2026-44839) affects the RabbitMQ server management UI due to unsanitized vhost names, enabling cross-site scripting. Affected versions are 3.7.0 up to but not including 4.1.2 and 4.0.13. The issue is fixed in 4.1.2 and 4.0.13. No exploitation status is provided in the ...