CVE-2026-67223 | RabbitMQ up to 4.3.2 LDAP Authentication fill Username injection

A vulnerability identified as critical has been detected in RabbitMQ up to 3.13.17/4.0.22/4.1.13/4.2.8/4.3.2. Impacted is the function fill of the component LDAP Authentication. Performing a manipulation of the argument Username results in injection.

This vulnerability is cataloged as CVE-2026-67223. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More