🟠 High | Source: Microsoft Security Response Center
CVE-2026-57211 is a Server-Side Request Forgery (SSRF) vulnerability affecting the RabbitMQ management UI when running on Windows, with implications for Azure-hosted deployments. SSRF flaws allow an attacker to trick the server into making unintended network requests, potentially exposing internal resources or metadata services. This is particularly concerning in cloud environments where instance metadata endpoints can be leveraged to escalate privileges or extract credentials.
Security Architect’s Take: Audit any Azure-hosted RabbitMQ deployments running on Windows and apply the relevant patch immediately; in the interim, restrict access to the RabbitMQ management UI via network controls (e.g. NSGs or private endpoints) and ensure the instance metadata service (IMDS) is not reachable from the RabbitMQ process context.
Original advisory: CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows