Bug 2541531 (CVE-2026-67411)
| Summary: | CVE-2026-67411 rabbitmq-server: rabbitmq-server: Access control bypass via PROXY protocol handling in MQTT | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | eglynn, jjoyce, jpretori, jschluet, lhh, mburns, mgarciac |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in rabbitmq-server. When native Message Queuing Telemetry Transport (MQTT) or MQTT over WebSockets operates behind a trusted proxy utilizing the PROXY protocol, the broker may drop the client IP address before enforcing user restriction checks. This failure causes external connections to be incorrectly identified as local loopback traffic. A remote attacker with valid credentials for an account restricted to local access can exploit this flaw to bypass source-address restrictions and connect remotely.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-09-25 16:53:39 UTC
|