Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

rabbitmq-server · Vulnerability

CVSS 4.0 5.1 MEDIUMCheck source for fixed versionsKEV status unknown

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-67407

Published

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does not escape -, leaving room for an MQTT topic permission bypass. the CVE-2026-44838 fix made expandtopicpermission/2 escape regex metacharacters in expanded topic-permission variables (escaperegex(V)), but escaperegexchar/1 escapes \ ^ $ . | ? + ( ) [ ] { } and omits -. When a topic permission template places {clientid} inside a [...] character class A low-privileged authenticated MQTT user controlling its clientid can broaden topic authorization (read and write) when templates embed {clientid} in a [...] This issue is fixed in versions 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-67407

Published

rabbitmq-server

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "rabbitmq",
                    "product": "rabbitmq-server",
                    "versions": [
                        {
                            "version": ">= 4.3.2, < 4.3.3",
                            "status": "affected"
                        },
                        {
                            "version": ">= 4.2.0, < 4.2.9",
                            "status": "affected"
                        },
                        {
                            "version": ">= 4.1.0, < 4.1.14",
                            "status": "affected"
                        },
                        {
                            "version": ">= 4.0.0, < 4.0.23",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 13:19 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current