Disclosure summary
CVE-2026-57215 is a high-severity CWE-863 vulnerability in RabbitMQ. Direct-reply-to bindings enable cross-tenant injection. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.
Verification standard
Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.