Dashboard / CVE-2026-57217

CVE-2026-57217

HIGH
MEDIUM Priority: 0.02 BB Relevance: 64/100
Published: 2026-07-10 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: Present
VC: High
VI: None
VA: None

Description

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which the internal backend treats as allow. This issue is fixed in versions 3.13.15, 4.0.21, 4.1.11, and 4.2.6.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
broadcom rabbitmq_server 3.13.0 – 4.2.6

References & Advisories (6)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.35%
Raw Score 0.003520
Percentile 28.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00352
2026-10-28
0.00352

Intelligence Sources

nvd ref →

External Links