Vulnerability Details CVE-2026-67233
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is_authorized/2 delegates to rabbit_mgmt_util:is_authorized_monitor/2, which accepts the monitoring tag. But allowed_methods includes DELETE, and delete_resource/2 deletes / restarts shovel runtime parameters with no additional role check. A monitoring user , intended to have read-only visibility , can therefore delete or restart any shovel in any vhost they can see. A read-only monitoring user can delete or restart any dynamic shovel , a state-changing operation that the equivalent /api/parameters endpoint correctly restricts to policymaker. Preconditions include rabbitmq_shovel + rabbitmq_shovel_management plugins enabled Attacker has credentials with the monitoring tag. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 21.7%
CVSS Severity
CVSS v3 Score 7.1
References
Products affected by CVE-2026-67233
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.0
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.1
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.10
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.11
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.12
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.13
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.14
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.15
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.16
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.17
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.18
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.19
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.2
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.3
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.4
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.5
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.6
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.7
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.8
-
cpe:2.3:a:broadcom:rabbitmq_server:4.0.9
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.0
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.1
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.2
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.3
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.4
-
cpe:2.3:a:broadcom:rabbitmq_server:4.2.5
-
cpe:2.3:a:broadcom:rabbitmq_server:4.3.0