REDHAT-BUG-2510277: High severity Apache ActiveMQ Artemis vulnerability
Published Aug 3, 2026
·Updated
Source: Internal security audit — AMQ Broker f005 Upstream project: Apache ActiveMQ Artemis Upstream advisory: None — pending report to security
Affected code: - OpenWireConnection.java — processRemoveSubscription() executes pre-auth, calls server.destroyQueue(SimpleString) with null SecurityAuth, skipping authorization check entirely
Fix status: No upstream fix available. Vulnerability confirmed in upstream versions 2.33.0, 2.40.0, 2.55.0 (latest) and downstream AMQ Broker 7.14 GA.
Affected Software
2 affected components
Apache ActiveMQ Artemis=2.33.0, =2.40.0, =2.55.0
Red Hat AMQ Broker=7.14
Event History
Aug 3, 2026
Data Sourced
via Red Hat·05:19 AM
DescriptionSeverityAffected Software