← CVE Intelligence

CVE-2026-44839

RabbitMQ: Unsanitized vhost names allow for XSS in management UI PUBLISHED

Description (CNA)

RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.

Affected (CNA)

Vendor / productVersions
rabbitmq / rabbitmq-serveraffected >= 3.7.0, < 4.0.13; affected >= 4.1.0-alpha, < 4.1.2

CWE

CWE-80

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.