CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

Affected products

Debian, Rabbitmq, Red Os, Suse, Ubuntu

Broadcom Rabbitmq Server

< 4.0.8

Fix

Available

CVSS 4.0

6.7 MEDIUM

CVSS 3.1

5.5 MEDIUM

EPSS

0.2% (9th percentile)

Weakness

CWE-532

NVD status

Analyzed

Published

2025-06-19

No exploit for CVE-2025-50200 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.