A vulnerability in the Rubygem MQTT package prior to version 0.7.0 allows for possible Man-in-the-Middle (MITM) attacks due to lack of hostname validation by default. This flaw could enable attackers to intercept or modify communications. The issue is fixed in version 0.7.0. Red Hat notes that in their Satellite product the impact is low because the MQTT gem is used only locally between components on the same machine. No known exploits are reported in the wild.