CVE-2026-25768 — LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnerability is fixed — CVE Database · The Intelligence Room