Skip to content
OpenAdvisories
High · 7.1 CVE-2026-67419 EUVD-2026-87243

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

Published Sep 25, 2026 · Updated Sep 25, 2026 · Assigned by GitHub_M

Description

RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive # segments in a binding key to make both topic matchers revisit the same trie-node and routing-key-suffix states without memoization. The matcher materializes duplicate destinations before deduplication, causing combinatorial CPU work and memory pressure that can disrupt routing for all tenants. This vulnerability is fixed in 4.3.5.

Affected products

VendorProductAffectedFixed
rabbitmq rabbitmq-server < 4.3.5 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 rabbitmq-server 4.3.6-1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 rabbitmq-server No fix yet —
Ubuntu 26.04 LTS rabbitmq-server No fix yet —
Ubuntu 24.04 LTS rabbitmq-server No fix yet —
Ubuntu 22.04 LTS rabbitmq-server No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS rabbitmq-server No fix yet —
Ubuntu Pro 18.04 LTS rabbitmq-server No fix yet —
Ubuntu Pro 16.04 LTS rabbitmq-server No fix yet —
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 rabbitmq-server4.3 4.3.6-1.hum1 RHSA-2026:67552

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 rabbitmq-server 3.13.7-10 —

Advisories 2

References