Listen to this Post
How CVE-2025-27427 Works
This vulnerability in Apache ActiveMQ Artemis (versions 2.0.0 to 2.39.0) allows users with `createDurableQueue` or `createNonDurableQueue` permissions to manipulate an address’s routing-type without requiring `createAddress` permissions. Attackers exploiting this flaw can bypass intended restrictions by combining the `send` permission with automatic queue creation, enabling them to send messages with unauthorized routing-types. The system fails to enforce proper permission checks, allowing message delivery that should be rejected.
DailyCVE Form
Platform: Apache ActiveMQ Artemis
Version: 2.0.0 – 2.39.0
Vulnerability: Permission Bypass
Severity: Critical
Date: 07/14/2025
Prediction: Patch expected by 08/15/2025
What Undercode Say
Analytics:
nmap -p 61616 <target_IP> curl -XGET http://<target_IP>:8161/api/jolokia
How Exploit:
import stomp
conn = stomp.Connection([('<target_IP>', 61616)])
conn.connect()
conn.send(destination='unauthorized_routing_queue', body='exploit_payload')
Protection from this CVE:
- Upgrade to v2.40.0
- Disable automatic queue creation
- Restrict queue permissions
Impact:
Unauthorized message routing
Privilege escalation
Queue manipulation
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
