THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-33mj-cw25-m34h (critical) — RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

[GHSA] GHSA-33mj-cw25-m34h (critical) — RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

medgithub_advisoriesPublished 2026-09-17

GHSA-33mj-cw25-m34h Severity: critical CVE: CVE-2026-77405

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

## Summary A structural security weakness exists in the AMQP client's TLS configuration generator (`tlsConfigFromURI`). When constructing a `*tls.Config` object from an `amqps://` connection URI, the library initializes the structure without explicitly

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://github.com/advisories/GHSA-33mj-cw25-m34h