A high‑severity vulnerability exists in the deployment of Genetec RabbitMQ. The flaw allows an attacker to elevate privileges and gain higher‑level access than intended. The weakness is identified as CWE‑732, which relates to incorrect authorization controls.

The affected products are listed by Genetec, Inc.: Genetec Airport Operational Manager, Genetec Industrial IoT, Genetec Inter‑System Gateway, Genetec Mission Control, Genetec RabbitMQ, Genetec Restricted Security Area, and Genetec Sipelia. These products employ RabbitMQ deployments that are vulnerable to privilege escalation.

The CVSS base score of 7.8 categorizes it as high severity, and the EPSS score is not available, meaning no current epidemiological data is reported. It is not listed in CISA’s KEV catalog. The likely attack vector is through access to the RabbitMQ deployment, potentially via network or the management interface, but this is inferred from the nature of the flaw and the lack of detailed exploitation information.