Skip to main content

New research: Apex vs Claude Code Security vs Codex Security on the same codebase.

Vulnerability disclosure

OAuth consumers retain access after token expiry

CVE-2026-57218

Affected product
RabbitMQ
Severity
Medium
CVSS
4.9
Weakness
CWE-863
Published

Disclosure summary

CVE-2026-57218 is a medium-severity CWE-863 vulnerability in RabbitMQ. OAuth consumers retain access after token expiry. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.

Verification standard

Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.