Skip to main content

New research: Apex vs Claude Code Security vs Codex Security on the same codebase.

Vulnerability disclosure

Proxy handling bypasses loopback-only authentication

CVE-2026-57216

Affected product
RabbitMQ
Severity
Medium
CVSS
6.8
Weakness
CWE-290
Published

Disclosure summary

CVE-2026-57216 is a medium-severity CWE-290 vulnerability in RabbitMQ. Proxy handling bypasses loopback-only authentication. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.

Verification standard

Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.