RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path containing ampersand or equals delimiters and later reparses the serialized URI with ParseURI, the embedded delimiters can create or overwrite connection options, including paths to TLS certificate, key, or CA files. This can corrupt connection configuration or select unintended local cryptographic assets. This issue is fixed in version 1.13.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates
    CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of
    encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path
    containing ampersand or equals delimiters and later reparses the serialized URI with ParseURI, the
    embedded delimiters can create or overwrite connection options, including paths to TLS certificate, key,
    or CA files. This can corrupt connection configuration or select unintended local cryptographic assets.
    This issue is fixed in version 1.13.0. (CVE-2026-77404)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates     CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of     encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path     containing ampersand or equals delimiters and later reparses the serialized URI with ParseURI, the     embedded delimiters can create or overwrite connection options, including paths to TLS certificate, key,     or CA files. This can corrupt connection configuration or select unintended local cryptographic assets.
    This issue is fixed in version 1.13.0. (CVE-2026-77404)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
455451	Echo: github.com/rabbitmq/amqp091-go: security update to 1.13.0	Tenable Cloud Security	Echo Local Security Checks	Local	high
455451	Echo: github.com/rabbitmq/amqp091-go: security update to 1.13.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
348233	Linux Distros Unpatched Vulnerability : CVE-2026-77404	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-77404

high

Tenable Plugins

high

high

high