CVE-2026-57967

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0

Description An unauthenticated remote attacker can craft a CORE protocol SESSION REATTACH packet to hijack a live authenticated session. This allows the attacker to steal an existing session, assume ongoing execution of that session, create queues, or delete queues without requiring credentials.

Recommendations Upgrade Apache Artemis to version 2.57.0. Upgrade Apache ActiveMQ Artemis to version 2.57.0.