CVE-2026-57219 Scanner
CVE-2026-57219 Scanner - Information Disclosure vulnerability in RabbitMQ Management
Used 2.9k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-57219
8.7
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the obsolete GET /api/auth endpoint can disclose the OAuth 2 client secret on RabbitMQ installations configured with management.oauth_client_secret, exposing credentials to unauthenticated callers when the management plugin and that OAuth configuration are enabled. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.
Attack Vector
Network
Privileges Req.
None
User Interaction
A
rabbitmq-server
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: rabbitmq-server
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →