🟠 High | Source: Microsoft Security Response Center
CVE-2026-57213 is a stored cross-site scripting (XSS) vulnerability in RabbitMQ’s federation management plugin, caused by unsanitised rendering of the consumer_tag field. An attacker who can influence consumer_tag values could inject malicious scripts that execute in the browsers of users viewing the RabbitMQ management UI. This is particularly relevant in Azure environments where RabbitMQ is used as a message broker, as exploitation could lead to session hijacking or credential theft.
Security Architect’s Take: Restrict access to the RabbitMQ management UI to trusted networks or VPN only, and apply any available patch or updated plugin version immediately. Review whether consumer_tag values are sourced from untrusted input and enforce input validation at the application layer as a defence-in-depth measure.
Original advisory: CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering