Summary
Direct-reply-to bindings enable cross-tenant injection. This high-severity finding affects RabbitMQ.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Direct-reply-to bindings enable cross-tenant injection
CVE-2026-57215
- Affected product
- RabbitMQ
- Severity
- High · CVSS 7.0
- Weakness
- CWE-863
- Disclosed