SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-18655

MEDIUM · CVSS 6.5 EPSS 0.25% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-03 · Last synced 2026-09-02

CyberRota Analysis

AI-Generated

The RabbitMQ broker connection tools in the Amazon MQ MCP Server prior to version 2.0.24 are vulnerable to improper endpoint restrictions, allowing remote unauthenticated attackers to exploit prompt injection. This could lead to unauthorized access to sensitive credentials or OAuth tokens. Organizations using Amazon MQ for RabbitMQ should prioritize upgrading to the latest version to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18655
Severity
MEDIUM
CVSS
6.5
EPSS
0.25%

Original NVD Description

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unauthenticated actor (via prompt injection) to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a crafted endpoint controlled through a broker hostname introduced in the MCP client context. To remediate this issue, users should upgrade to version 2.0.24.