CVE-2026-67416Published
RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-67416 · Microsoft / collected KEV context
cve-program · CVE-2026-67416
- https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-p35w-6mx2-q4pc
- https://github.com/rabbitmq/rabbitmq-server/pull/17017
- https://github.com/rabbitmq/rabbitmq-server/pull/17287
- https://github.com/rabbitmq/rabbitmq-server/commit/c9b4b10c2dbf0f1c89f10b482ac8b45f84dc5954
- https://github.com/rabbitmq/rabbitmq-server/commit/d5186e66e056960f58e2d0fbee2fcc66e1ed6fb9
- https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.4
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.