Authentication Bypass Vulnerability in Apache Qpid Proton C

CVE-2026-114230

What is CVE-2026-114230?

A security flaw in Apache Qpid Proton C allows for an authentication bypass when SASL frames are dispatched. If AMQP frames masquerade as SASL frames, it enables the interception of authentication processes. Since no user name is set during this event, the impact varies depending on how the specific application handles incomplete authentication situations. Users should upgrade to version 0.41.1 to mitigate this vulnerability.

References