Summary
OAuth consumers retain access after token expiry. This medium-severity finding affects RabbitMQ.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
OAuth consumers retain access after token expiry
CVE-2026-57218
- Affected product
- RabbitMQ
- Severity
- Medium · CVSS 4.9
- Weakness
- CWE-863
- Disclosed