Improper access control in RabbitMQ Server - #VU139287
Published: July 24, 2026
Vulnerability details
The vulnerability allows a remote user to bypass intended write permission restrictions and route unroutable messages into an alternate exchange.
The vulnerability exists due to improper access control in the AMQP 1.0 management exchange declaration path when handling HTTP-over-AMQP management requests that declare an exchange with the alternate-exchange argument. A remote privileged user can declare an exchange they can configure and set an unauthorized alternate exchange to bypass intended write permission restrictions and route unroutable messages into that exchange.
Exploitation requires AMQP 1.0 to be enabled and the ability to configure at least one exchange without having write permission on the target alternate exchange.