CVE-2026-67242 | RabbitMQ up to 4.2.8/4.3.2 OAuth2 validatetokenexpiry Exp session expiration

A vulnerability has been found in RabbitMQ up to 4.2.8/4.3.2 and classified as critical. Affected is the function validatetokenexpiry of the component OAuth2. Performing a manipulation of the argument Exp results in session expiration.

This vulnerability was named CVE-2026-67242. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More