Remote File Reading Vulnerability in OpenMQ by Eclipse
CVE-2026-24457

9.1CRITICAL

Key Information:

Vendor

Eclipse Foundation

Status
Eclipse OpenMQ
Vendor
CVE Published:
5 March 2026

What is CVE-2026-24457?

An insecure parsing issue within OpenMQ's configuration allows remote attackers to read arbitrary files on the server hosting the MQ Broker. This vulnerability compromises sensitive data and can lead to further exploitation, including potential remote code execution (RCE). It's essential for users of OpenMQ to apply security patches promptly to mitigate these risks and protect their systems from unauthorized access.

Affected Version(s)

Eclipse OpenMQ 0 <= 6.5.1

References

https://gitlab.eclipse.org/security/cve-assignment/-/issu...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Camilo G. AkA Dedalo (DeepSecurity PerĂş)
.