RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

Researchers have found two access control flaws in the RabbitMQ message broker service that could be exploited by attackers. These flaws could lead to the leakage of OAuth client secrets and expose the messaging infrastructure to takeover risks. Additionally, the vulnerabilities could allow attackers to bypass tenant boundaries, potentially giving them access to sensitive information. The flaws were discovered and reported by Miggo's security team, which noted that one of the issues leaks the broker's confidential OAuth information. This could have significant implications for the security of enterprise messaging systems that rely on RabbitMQ. The vulnerabilities could enable attackers to gain unauthorized access to sensitive data and systems.