CVE-2026-44839
MediumAdvisory
Published 29 May 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.002
- 8th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 10
- of 17,781 indexed, latest versions
- Container images
- 7
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 7 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 3.10.7-1, 3.10.8-1, 3.11.18-0, 3.12.14-10+2 more | 4.0.13 | 7 |
| RabbitMQbitnami | 3.11.18, 3.12.14-10 | 4.0.13 | 2 |
- OSV records
- BIT-rabbitmq-2026-44839
- Also known as
- GHSA-fh5r-jpm3-fjwp
Charts affected
10 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| openctihelm-openctiVerified publisher | 3.0.9 | 1 of 8See more | 3,383 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 52,635 |
| enbuildenbuildVerified publisher | 0.0.50 | 1 of 6See more | 31,510 |
| clowder2ncsaVerified publisher | 1.9.7 | 1 of 12See more | 37,373 |
| arlas-aiasarlas-stackVerified publisher | 28.8.0 | 1 of 22See more | 40,238 |
| openaevhelm-openbasVerified publisher | 2.0.5 | 1 of 7See more | 7,437 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 25,017 |
| ibm-ucv-prodibm-helm | 5.2.6 | 1 of 16See more | 12,105 |
| backendsignalen | 4.24.0 | 1 of 4See more | 11,636 |
| servicexssl-hep | 1.8.5 | 1 of 16See more | 66,266 |
Container images carrying it
7 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | fac502149c40 | rabbitmq | 4.0.13 | 4 |
| bitnamilegacy/ | 29b0a2330572 | rabbitmq RabbitMQ | 4.0.13 4.0.13 | 1 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 4.0.13 | 1 |
| bitnamilegacy/ | 8f7161d8ce19 | rabbitmq | 4.0.13 | 1 |
| bitnamilegacy/ | cd593809e359 | rabbitmq | 4.0.13 | 1 |
| bitnamilegacy/ | cf93e2772250 | rabbitmq | 4.0.13 | 1 |
| registry.gitlab.com/ | 5a9334f371f3 | rabbitmq RabbitMQ | 4.0.13 4.0.13 | 1 |