CVE-2026-57211: RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static…

PriorityP264critical10CVSS 3.1

AVNACLPRNUINSCCHIHAH

EPSS

0.40%

32.7th percentile

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
broadcom	rabbitmq_server	>= 4.1.0 < 4.2.6	4.2.6
rabbitmq	rabbitmq-server	—	—
rabbitmq	rabbitmq-server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.