RabbitMQ Vulnerability Exposes OAuth Secrets to Attackers

A critical RabbitMQ vulnerability (CVE-2026-5721, CVSS 8.7) allows unauthenticated retrieval of OAuth client secrets from an exposed management endpoint, potentially enabling broker impersonation and administrator takeover. A second medium-severity authorization flaw (CVE-2026-57221, CVSS 5.3) permits authenticated users to enumerate queues and exchanges. Patches have been released for affected versions and the report urges immediate updates, access restriction, network segmentation, and secret rotation; no evidence of in-the-wild exploitation has been reported.