CVE-2026-57215

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6

Description RabbitMQ allows foreign bindings to 'amq.rabbitmq.reply-to' destinations. This occurs because volatile direct-reply-to queues are accepted during bind and route operations but are omitted from Khepri-backed deletion checks, which results in persistent route entries remaining after an unbind operation.

Recommendations Update to version 3.13.15 Update to version 4.0.20 Update to version 4.1.11 Update to version 4.2.6