CVE-2026-57211
published 2026-07-10CVE-2026-57211: RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static…
PriorityP262critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
0.63%
49.6th percentile
RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| broadcom | rabbitmq_server | >= 4.1.0 < 4.2.6 | 4.2.6 |
| rabbitmq | rabbitmq-server | — | — |
| rabbitmq | rabbitmq-server | — | — |
CVSS provenance
nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin
vendor_redhat·2026-07-10·CVSS 10.0
CVE-2026-57211 [CRITICAL] CWE-76 rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin
rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin
RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.
A flaw was found in RabbitMQ. The RabbitMQ management plugin static file handler, `rabbit_mgmt_wm_static`, on Windows can be exploited when multiple management extension plugins are enabled. An attacker can pass specially crafted URL-encoded backslashes, bypassing path validation.
VulDB
RabbitMQ up to 4.1.10/4.2.5 Static File rabbit_mgmt_wm_static information disclosure
vuldb·2026-07-10·CVSS 6.5
CVE-2026-57211 [MEDIUM] RabbitMQ up to 4.1.10/4.2.5 Static File rabbit_mgmt_wm_static information disclosure
A vulnerability has been found in RabbitMQ up to 4.1.10/4.2.5 and classified as problematic. The affected element is the function rabbit_mgmt_wm_static of the component Static File Handler. Performing a manipulation results in information disclosure.
This vulnerability is known as CVE-2026-57211. Remote exploitation of the attack is possible. No exploit is available.
No detection rules found.
No public exploits indexed.
https://github.com/rabbitmq/rabbitmq-server/commit/39c3a8e9c71da0403d8dfc13f700e60c936e3682https://github.com/rabbitmq/rabbitmq-server/commit/6730797f6a34b4e8308cea60adf1243857e70204https://github.com/rabbitmq/rabbitmq-server/pull/15803https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-7v84-m3g5-vxq6https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-7v84-m3g5-vxq6
2026-07-10
Published