Overly permissive cross-domain whitelist in RabbitMQ Server - #VU137235
Published: July 9, 2026
Vulnerability details
The vulnerability allows a remote attacker to issue authenticated, state-changing requests to the management API and compromise confidentiality and integrity.
The vulnerability exists due to permissive cross-domain security policy with untrusted domains in rabbit_mgmt_cors.erl when handling cross-origin requests with a wildcard CORS origin configuration. A remote attacker can host a malicious web page that causes a signed-in administrator's browser to send authenticated requests to compromise confidentiality and integrity.
User interaction is required, and exploitation depends on the management plugin being configured with cors_allow_origins = "*" and a target administrator having cached HTTP Basic credentials in the browser.