CVE-2026-67593
published 2026-09-10CVE-2026-67593: A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection…
PriorityP358critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
0.29%
21.2th percentile
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache_software_foundation | apache_activemq_artemis | 1.0.0 – 2.44.0 | — |
| apache_software_foundation | apache_activemq_artemis | 2.32.0 – 2.44.0 | — |
| apache_software_foundation | apache_artemis | 2.50.0 – 2.56.0 | — |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
vendor_redhat9.1CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache ActiveMQ Artemis Openwire Protocol authorization
vuldb·2026-09-10
CVE-2026-67593 [CRITICAL] Apache ActiveMQ Artemis Openwire Protocol authorization
A vulnerability categorized as critical has been discovered in Apache ActiveMQ Artemis. This affects an unknown part of the component Openwire Protocol. Executing a manipulation can lead to missing authorization.
This vulnerability is registered as CVE-2026-67593. It is possible to launch the attack remotely. No exploit is available.
Red Hat
artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo
vendor_redhat·2026-09-10·CVSS 9.1
CVE-2026-67593 [CRITICAL] CWE-306 artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo
artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo
An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled (default). The processRemoveSubscription() method executes pre-authentication with no authorization check, and uses the internal destroyQueue(SimpleString) overload that skips security entirely. Default queues DLQ and ExpiryQueue are trivially targetable. This is unfixed in all Artemis versions through 2.55.0.
Mitigation: 1. Remove OpenWire from acceptors — edit broker.xml, remove OPENWIRE from protocols parameter
2. Firewall — restrict port 61616 to trusted clients if OpenWire cannot be disabled
3. Monitor — watch for "AMQ60
No detection rules found.
No public exploits indexed.
2026-09-10
Published