{"id":"CVE-2026-57211","aliases":["AZL-92361","EUVD-2026-43016","GHSA-7v84-m3g5-vxq6","RHSA-2026:35939","RHSA-2026:35940","UBUNTU-CVE-2026-57211"],"status":"published","title":"RabbitMQ: UNC SSRF affecting the management UI on Windows","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00631,"percentile":0.50518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-36","CWE-918"],"published":"2026-07-10T20:16:01Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"rabbitmq-server","fixed_in":["3.13.7-8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.7-8"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rabbitmq-server4.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rabbitmq-server4.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.8-1.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.4-1","3.5.4-3","3.5.4-3.1","3.5.7-1","3.5.7-1ubuntu0.16.04.1","3.5.7-1ubuntu0.16.04.2","3.5.7-1ubuntu0.16.04.4","3.5.7-1ubuntu0.16.04.4+esm1","3.5.7-1ubuntu0.16.04.4+esm2","3.5.7-1ubuntu0.16.04.4+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.10-1","3.6.10-1ubuntu0.1","3.6.10-1ubuntu0.3","3.6.10-1ubuntu0.4","3.6.10-1ubuntu0.5","3.6.10-1ubuntu0.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.8-4ubuntu2","3.7.18-1","3.8.2-0ubuntu1","3.8.2-0ubuntu1.1","3.8.2-0ubuntu1.2","3.8.2-0ubuntu1.3","3.8.2-0ubuntu1.4","3.8.2-0ubuntu1.5","3.8.3-0ubuntu0.1","3.8.3-0ubuntu0.2","3.8.3-0ubuntu0.3","3.8.3-0ubuntu0.3+esm1","3.8.3-0ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.9-3ubuntu1","3.9.8-1","3.9.8-2","3.9.8-3","3.9.8-5","3.9.8-6","3.9.13-1","3.9.13-1ubuntu0.22.04.1","3.9.13-1ubuntu0.22.04.2","3.9.27-0ubuntu0.1","3.9.27-0ubuntu0.2","3.9.27-0ubuntu0.5","3.9.27-0ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.1-1","3.12.1-1ubuntu1","3.12.1-1ubuntu1.2","3.12.1-1ubuntu1.4","3.12.1-1ubuntu1.6","3.12.1-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.5-10ubuntu5","4.3.2-4ubuntu2","4.3.2-4ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rabbitmq-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.5-8ubuntu2","4.0.5-10ubuntu1","4.0.5-10ubuntu2","4.0.5-10ubuntu3","4.0.5-10ubuntu4","4.0.5-10ubuntu5","4.0.5-10ubuntu5.1","4.0.5-10ubuntu5.2"]}],"products":[{"vendor":"broadcom","product":"rabbitmq_server"},{"vendor":"rabbitmq","product":"rabbitmq-server"}],"references":[{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-7v84-m3g5-vxq6","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15803","tags":["x_refsource_MISC","Issue Tracking","Patch","fix","article","report"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/39c3a8e9c71da0403d8dfc13f700e60c936e3682","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/6730797f6a34b4e8308cea60adf1243857e70204","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6","tags":["x_refsource_MISC","Release Notes","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57211","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57211.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:35939","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57217","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57214","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57219","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57220","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57212","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57221","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57211","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57213","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57218","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57215","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57216","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35939.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499215","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57211","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499205","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57212","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/3976d148901bdfa82e1cd60b7a4534e073266ba5","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/b8fc2ef7c50a2797d15e1ea7cf34f290032303bb","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15712","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15714","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.5","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5cmq-vp28-xqrj","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57213","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/33dedfe4fd53ff009cc67ab36358d0624c6b2e53","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/c2d0d69edf01efbd6e87dfb250c373a32da957f8","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15708","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15711","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-qxrp-7cmp-p77h","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57214","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/b0027b6c1ae5b869d876e211efe6189ffd92b5c2","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/b267a290dd89e42c6e0256f46fc273a8adb7f3ec","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15606","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15608","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-6jfq-prw2-7rwp","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57215","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/9055500d10ca7629dd2b051c6dc7a4b0bb8f6734","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/c84f3c880e0f22b49c01237cf8f86e176eeadc72","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15935","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15938","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5cq3-v9jx-p3x3","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499211","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57216","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/7273c9eb6920abcde17b892dbe97ccaf906ead47","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/9f8c39fcf0acbc43080ee7017a62a02832114112","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15936","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15940","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-36m6-588r-vqcw","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57217","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/94f1d33a70fcfa09006649599e79fc92786a2d36","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/ce1f682aa6b398820c5e3ce1ff7435184027c82c","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15941","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/15943","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-gpvw-75h5-3wvx","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57218","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/501ad947cd6bbcc9486fe96e0d073992bfe52cc4","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/db20d6c0fcf3056030f244b5adab0d45c0db0c9e","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16092","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16097","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-wmrr-4h5v-5ch7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57219","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/98b1daf740237c85941e8addcbea6e74f4a2743c","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/aa387c4451e7b674df3e3ba89df86a99d697cc7f","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16083","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16086","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-pj24-8j6m-vq9q","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57220","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/595ec28fa1621b1f2c28124e4e0466a8ad963547","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/773a49c4921e8be990262a2d609c35916825679e","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16171","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16173","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-f364-87q5-j35q","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57221","tags":["advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/709a14e49e06c138a8cd672c9809ca34a2767962","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/dc3d1aa4f5c3331a425ee599b45be9423a2e83fc","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16085","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/16090","tags":["article"]},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9q2j-2hq8-22r2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:35940","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35940.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-57211","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-57211","title":"RabbitMQ: UNC SSRF affecting the management UI on Windows","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T20:16:01.719Z","modified":"2026-07-13T16:13:38.702Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-36","CWE-918"],"updated_at":"2026-11-02T13:43:44.898272Z"}],"euvd":[{"id":"EUVD-2026-43016","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T20:16:01Z","modified":"2026-07-13T16:13:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:01.134466Z"}],"nvd":[{"id":"CVE-2026-57211","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T21:16:58.007Z","modified":"2026-10-25T15:10:00.147Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-36","CWE-918"],"updated_at":"2026-11-02T14:12:28.771746Z"}],"osv":[{"id":"CVE-2026-57211","title":"RabbitMQ: UNC SSRF affecting the management UI on Windows","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T20:16:01.719Z","modified":"2026-10-28T02:30:34.217560974Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-36","CWE-918"],"updated_at":"2026-11-02T15:45:12.016252Z"},{"id":"RHSA-2026:35939","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-29T10:09:09Z","modified":"2026-09-08T10:12:53Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:35940","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-29T10:09:09Z","modified":"2026-09-08T10:12:54Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"UBUNTU-CVE-2026-57211","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T21:16:00Z","modified":"2026-10-17T12:59:12.425034221Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"AZL-92361","title":"CVE-2026-57211 affecting package rabbitmq-server for versions less than 3.13.7-8","description":"RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.","status":"published","published":"2026-07-10T21:16:58Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"}]}}