JavaScript Execution Vulnerability in RabbitMQ Management UI - RabbitMQ
CVE-2026-67237
7.5HIGH
What is CVE-2026-67237?
A vulnerability exists in RabbitMQ that potentially allows an attacker to inject JavaScript into the management UI by exploiting the set_token_auth/2 function. This occurs when a bearer token from the Authorization header or access_token cookie is not properly escaped before being inserted into the OAuth bootstrap JavaScript. The exposed endpoint is accessible without authentication under certain configurations, particularly when management.oauth_enabled is set to true. An attacker must also manipulate the access_token cookie on the management host to exploit this vulnerability. The issue is resolved in RabbitMQ versions 4.2.8 and 4.3.2.
Affected Version(s)
rabbitmq-server >= 4.2.0, < 4.2.8 < 4.2.0, 4.2.8
rabbitmq-server >= 4.3.0, < 4.3.2 < 4.3.0, 4.3.2