RabbitMQ vulnerabilities and fixes

CVEs that mention RabbitMQ, ranked by priority. 8 tracked.

RabbitMQ has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-10-23. Highest priority: CVE-2026-69219 (score 49/100).

• CVE-2026-69219 HIGH 8.7 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit
• CVE-2026-69220 HIGH 8.7 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit
• CVE-2026-63337 HIGH 7.5 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit
• CVE-2026-18655 MEDIUM 6.5 Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server
• CVE-2026-63335 MEDIUM 6.3 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit
• CVE-2025-30051 MEDIUM 6.8 The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker cre
• CVE-2026-63336 MEDIUM 5.1 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit
• CVE-2026-61634 NONE 0.0 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit

FAQ

How do I fix RabbitMQ vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is RabbitMQ being exploited right now?

None of the tracked RabbitMQ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which RabbitMQ CVE should I patch first?

CVE-2026-69219 currently ranks highest (49/100): The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit.

← Back to latest CVEs