RabbitMQ 3.13.x < 3.13.15 / 4.0.x < 4.0.20 / 4.1.x < 4.1.11 / 4.2.x < 4.2.6 AMQP Authorization Bypass

high Nessus Plugin ID 327582

Synopsis

The RabbitMQ installed on the remote host is affected by multiple vulnerabilities.

Description

The version of RabbitMQ installed on the remote host is affected by multiple vulnerabilities:

- RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile direct-reply-to queues can be accepted at bind and route time but are missing from Khepri-backed deletion checks, leaving persistent route entries after unbind. (CVE-2026-57215)

- RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP operations, allowing any authenticated user to enumerate all queue and exchange names in a virtual host and read queue message counts and consumer counts. (CVE-2026-57221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to RabbitMQ version 3.13.15, 4.0.20, 4.1.11, 4.2.6, or later.

Plugin Details

Severity: High

ID: 327582

File Name: rabbitmq_amqp_authz_bypass_3_13_15.nasl

Version: 1.1

Type: Local

Agent: windows, macosx, unix

Family: Misc.

Published: 7/17/2026

Updated: 7/17/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.15

CVSS v2

Risk Factor: High

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-57215

CVSS v3

Risk Factor: High

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:vmware:rabbitmq, cpe:/a:pivotal_software:rabbitmq

Required KB Items: installed_sw/RabbitMQ

Patch Publication Date: 7/10/2026

Vulnerability Publication Date: 7/10/2026

Reference Information

CVE: CVE-2026-57215, CVE-2026-57221

Detections

Analytics