CVE-2026-57967: Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
CVE-2026-57967: unauthenticated attackers can hijack authenticated ActiveMQ Artemis sessions via crafted CORE protocol SESSION_REATTACH packets.
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session on Apache Artemis and ActiveMQ Artemis. Affected versions are artemis-server 2.50.0 through 2.56.0 in Apache Artemis and artemis-server 1.0.0 through 2.44.0 in Apache ActiveMQ Artemis. Apache rates the issue important.
- Missing authentication on CORE session reattachment lets attackers steal live sessions.
- Unauthenticated remote attackers can assume execution of an authenticated session.
- Affects artemis-server 2.50.0-2.56.0 (Artemis) and 1.0.0-2.44.0 (ActiveMQ Artemis).
- CVEs
- CVE-2026-57967
- Vendors
- Apache
- Products
- Apache ArtemisApache ActiveMQ
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-57967 | Unauthenticated Session Hijack in Apache ActiveMQ Artemis CORE Protocol | 9.8 | 1% | PoC |
From the original article
Posted by Clebert Suconic on Sep 09 Severity: important Affected versions: - Apache Artemis (org. apache. artemis:artemis-server) 2.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.