Vulnerability · Published Sep 16, 2026 · Assigned by GitHub_M

CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

High 8.7

In plain English

A high-severity security flaw in amqp091-go from rabbitmq. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.1%top 99.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path containing ampersand or equals delimiters and later reparses the serialized URI with ParseURI, the embedded delimiters can create or overwrite connection options, including paths to TLS certificate, key, or CA files. This can corrupt connection configuration or select unintended local cryptographic assets. This issue is fixed in version 1.13.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:13	golang-github-rabbitmq-amqp091-go	no fix listed	DEBIAN-CVE-2026-77404
Debian:14	golang-github-rabbitmq-amqp091-go	1.14.0-1	DEBIAN-CVE-2026-77404
Go	github.com/rabbitmq/amqp091-go	1.13.0	GHSA-465g-fh3v-9jw4
Go	github.com/rabbitmq/amqp091-go	1.13.0	GO-2026-6493
Ubuntu:24.04:LTS	golang-github-rabbitmq-amqp091-go	no fix listed	UBUNTU-CVE-2026-77404
Ubuntu:26.04:LTS	golang-github-rabbitmq-amqp091-go	no fix listed	UBUNTU-CVE-2026-77404
Ubuntu:26.10	golang-github-rabbitmq-amqp091-go	no fix listed	UBUNTU-CVE-2026-77404

Affected products (as reported)

Vendor	Product	Versions
rabbitmq	amqp091-go	< 1.13.0

Weakness: CWE-116 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

References

https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-465g-fh3v-9jw4 x_refsource_CONFIRM
https://github.com/rabbitmq/amqp091-go/pull/352 x_refsource_MISC
https://github.com/rabbitmq/amqp091-go/commit/743d488e46955fe7ffc55506fe2c401d01216783 x_refsource_MISC
https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0 x_refsource_MISC