Skip to content
OpenAdvisories
Medium USN-7763-1 1 CVE

rabbitmq-server vulnerability

Published Sep 23, 2025 · Updated Oct 13, 2025

Ecosystem: Ubuntu

Summary

It was discovered that RabbitMQ Server incorrectly included authorization
headers when logging. A local attacker could possibly use this issue to
obtain sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 rabbitmq-server 4.0.5-2ubuntu2.1

Vulnerabilities 1

  • Medium 6.7
    CVE-2025-50200

    RabbitMQ Node can log Basic Auth header from an HTTP request

    RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request,…

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-50200