Path Traversal in RabbitMQ Management Plugin

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: GitHub, Inc.

Description

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-57211

Affected Vendors & Products

Vendor	Product	Version / Range
rabbitmq	rabbitmq	to 4.2.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
CWE-36	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

This vulnerability affects RabbitMQ's management plugin on Windows versions prior to 4.1.11 and 4.2.6. The static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to a function called erl_prim_loader:read_file_info before validating the path, but only when multiple management extension plugins are enabled. This improper handling allows the system to make outbound DNS and SMB requests to attacker-controlled UNC paths.

Impact Analysis

The vulnerability can lead to unauthorized outbound network requests to attacker-controlled locations via DNS and SMB protocols. This could potentially expose sensitive information or allow attackers to interact with the system remotely by exploiting these outbound connections.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade RabbitMQ to version 4.1.11 or 4.2.6 or later on Windows systems.

Hi! I’m here to help you understand CVE-2026-57211. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70