CVE-2026-18655

The record

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unauthenticated actor (via prompt injection) to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a crafted endpoint controlled through a broker hostname introduced in the MCP client context. To remediate this issue, users should upgrade to version 2.0.24.

Affected packages

Related vulnerabilities

• CVE-2026-10756 TRO600 contains a vulnerability that allows an authenticated attacker to bypass network… CWE-923
• CVE-2026-70212 Improper restriction of communication channel to intended endpoints in Windows Security… CWE-923
• CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
• CVE-2026-62836 Improper restriction of communication channel to intended endpoints in Azure SQL Managed… CWE-923
• CVE-2026-23904 Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP… CWE-923
• CVE-2026-63226 Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. CWE-923
• CVE-2026-8920 Improper Restriction of Communication Channel to Intended Endpoints and External Control… CWE-923
• CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923