Vulnerability in RabbitMQ Messaging and Streaming Broker
CVE-2026-67220

6MEDIUM

Key Information:

Vendor

RabbitMQ

Status
RabbitMQ-server
Vendor
CVE Published:
23 September 2026

What is CVE-2026-67220?

A vulnerability exists in RabbitMQ where the creation of bindings on an x-jms-topic exchange can lead to a Denial of Service (DoS). Specifically, when an authenticated low-privilege AMQP user attempts to add a binding using the rjms_erlang_selector argument, the lack of a length cap combined with an inefficient error handling process can result in a broker crash. This occurs within the environment of a single vhost with the necessary plugins enabled, allowing potential exploitation through excessive binding requests.

Affected Version(s)

rabbitmq-server >= 3.13.0, < 3.13.15 < 3.13.0, 3.13.15

rabbitmq-server >= 4.0.0, < 4.0.20 < 4.0.0, 4.0.20

rabbitmq-server >= 4.1.0, < 4.1.11 < 4.1.0, 4.1.11

References

https://github.com/rabbitmq/rabbitmq-server/security/advi...
x_refsource_CONFIRM
https://github.com/rabbitmq/rabbitmq-server/releases/tag/...
x_refsource_MISC

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.