Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-57217
6.5
MEDIUMCVSS v3
Published
July 10, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which the internal backend treats as allow. This issue is fixed in versions 3.13.15, 4.0.21, 4.1.11, and 4.2.6.
rabbitmq/rabbitmq-server
GitHubOpen source RabbitMQ: core server and tier 1 (built-in) plugins
GitHubOpen source RabbitMQ: core server and tier 1 (built-in) plugins>= 3.13.0, < 4.2.6NVD