high·Product Based Web Vulnerabilities·Updated Aug 30, 2026

Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2026-9133

7.7

CVSShigh

Exploitable remotely over the internet · low-privilege account sufficient.

Description

Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file reads on any file accessible to the RabbitMQ process. To remediate this issue, customers should upgrade to version 0.2.1 of rabbitmq-aws. If RabbitMQ is configured to use TLS for connections, we also recommend rotating any associated private certificate keys.

Attack Vector

Network

Privileges Req.

Low

User Interaction

None

Affected

RabbitMQ AWSby AWS

0.1.0

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read

Check your infrastructure.Right now.

Check your infrastructure.
Right now.