CVE-2021-22117: Broadcom Rabbitmq Server

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

Affected products

• Broadcom Rabbitmq Server: from 3.8.0, before 3.8.16 (fixed in 3.8.16)

Published 2021-05-18. Last modified 2026-06-17.