All vulnerabilities

Servers and applications

CVE-2020-5419

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.

Severity
Medium 6.7
Published
31 Aug 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.8.7
Sources
NVD

Affected software

SoftwareAffected versions
RabbitMQServers and applications · cpe:a:broadcom:rabbitmq_server
  • From 3.8.0 before 3.8.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-5419
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-5419