EUVD-2026-31181Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (AMZN) · only source for this CVE.
CVSS VectorVendor: AMZN
Lifecycle Timeline
3DescriptionCVE.org
Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file reads on any file accessible to the RabbitMQ process.
To remediate this issue, customers should upgrade to version 0.2.1 of rabbitmq-aws. If RabbitMQ is configured to use TLS for connections, we also recommend rotating any associated private certificate keys.
AnalysisAI
Arbitrary file read in amazon-mq rabbitmq-aws before 0.2.1 allows authenticated remote users to read any file accessible to the RabbitMQ process by submitting a crafted arn:aws-debug:file scheme to the PUT /api/aws/arn/validate validation endpoint. The flaw stems from leftover debug code in the ARN resolver and was reported by AWS itself; no public exploit has been identified at time of analysis and the issue is not listed in CISA KEV.
Technical ContextAI
rabbitmq-aws is the Amazon MQ integration library for RabbitMQ that resolves AWS resource identifiers (ARNs) used for cluster configuration and AWS service interactions. The vulnerability falls under CWE-489 (Active Debug Code): a non-production ARN scheme, arn:aws-debug:file, was left wired into the production ARN resolver and reachable through the PUT /api/aws/arn/validate endpoint, where the validation routine evidently dereferences the path component and returns file contents instead of restricting input to legitimate AWS ARN schemes. Affected component per NVD CPE is cpe:2.3:a:aws:rabbitmq_aws, and the upstream 0.2.1 release notes explicitly call out 'Remove debug ARN format' as the fix.
RemediationAI
Vendor-released patch: rabbitmq-aws 0.2.1, available at https://github.com/amazon-mq/rabbitmq-aws/releases/tag/0.2.1, whose release notes confirm removal of the debug ARN format. Upgrade all RabbitMQ nodes using this plugin to 0.2.1 or later, and, as AWS specifically recommends, rotate any private TLS certificate keys associated with RabbitMQ connections because those keys may have been disclosed via the file-read primitive prior to patching. If immediate upgrade is not possible, restrict network access to the RabbitMQ management/API plane so that PUT /api/aws/arn/validate is reachable only from trusted administrative networks and audit existing low-privilege management accounts; this reduces exposure but does not eliminate risk from any user who already holds management credentials, and is not a substitute for upgrading. Consult the AWS advisory at https://aws.amazon.com/security/security-bulletins/2026-034-aws/ and GHSA-8554-wg4r-7hxm for the authoritative guidance.
Unauthorized data access in Budibase low-code platform before 3.30.4 allows unauthenticated users to manipulate internal
Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin manag
Remote code execution in Amazon awslabs postgres-mcp-server before 1.1.7 lets remote actors run arbitrary OS commands on
Remote code execution in AWS AgentCore CLI before v0.14.2 allows authenticated attackers to inject Python code via craft
Denial of service in Amazon's aws-smithy-http-server Rust crate (versions prior to 0.66.5) lets remote unauthenticated a
Argument injection in the AWS Bedrock AgentCore Python SDK before 1.18.1 lets a remote authenticated user run arbitrary
WAF managed-rule body inspection on AWS Application Load Balancer (ALB) can be bypassed by remote actors who fragment an
WAF inspection bypass in Amazon CloudFront (with AWS WAF enabled) lets remote actors smuggle malicious request bodies pa
A trust boundary enforcement vulnerability in Kiro IDE allows remote attackers to execute arbitrary code when a local us
Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to
Command injection in Amazon ECS Agent on Windows allows authenticated attackers with task definition permissions to exec
Security-policy bypass in the awslabs AWS API MCP Server (versions 0.2.13 through 1.3.46) lets an actor invoke AWS API o
Same weakness CWE-489 – Active Debug Code
View allShare
External POC / Exploit Code
Leaving vuln.today