TLS Client-Authentication Bypass in RabbitMQ Messaging Broker
CVE-2026-67231
What is CVE-2026-67231?
RabbitMQ, a widely-used messaging and streaming broker, has a vulnerability where its trust-store plugin allows attackers to bypass TLS client-authentication. This issue arises when the plugin verifies certificates based on a whitelisting mechanism that uses incomplete criteria, enabling a malicious actor who knows the issuer distinguished name and serial number of a whitelisted certificate to establish a connection with a forged self-signed certificate. The vulnerability occurs if the rabbitmq_trust_store plugin is enabled and set as the TLS verify function. Affected users should upgrade their RabbitMQ installations to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, or 4.3.0 to mitigate this security risk.
Affected Version(s)
rabbitmq-server >= 3.13.0, < 3.13.15 < 3.13.0, 3.13.15
rabbitmq-server >= 4.0.0, < 4.0.20 < 4.0.0, 4.0.20
rabbitmq-server >= 4.1.0, < 4.1.11 < 4.1.0, 4.1.11