CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header.

CVSS v3.1

—

EPSS

1.39%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Jan 20, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026