CVE-2026-57216

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6

Description Authentication for AMQP 0-9-1, AMQP 1.0, and Stream Protocol allows a loopback-restricted user, such as guest, to connect remotely. This occurs when traffic is accepted through a trusted PROXY-protocol path and the backend listener is loopback-bound, as the loopback check incorrectly utilizes the listener-side socket address instead of the actual client source.

Recommendations Update to version 3.13.15. Update to version 4.0.20. Update to version 4.1.11. Update to version 4.2.6.