Search: CVE-2026-77404

CVE-2026-77404 is a high-severity vulnerability in the RabbitMQ amqp091-go client prior to version 1.13.0. The issue arises because the URI.String function concatenates TLS asset paths directly into the AMQPS query string without proper URL encoding. This improper encoding can allow embedded delimiters in TLS asset paths to alter or overwrite connection options when the URI is reparsed, potentially corrupting connection configuration or causing unintended cryptographic assets to be selected. The vulnerability is fixed in version 1.13.0.