📦 Lavinmq

In LavinMQ versions before 2.6.8, authenticated users with the 'Policymaker' management tag can bypass access controls to create shovels, allowing them to read messages from or publish messages to vir...

CVE-2026-25768 is an authorization bypass vulnerability in LavinMQ message queue server where authenticated users can access broker metadata they shouldn't have permission to view. This affects all La...