CVE-2026-67413

Undergoing Analysis Undergoing Analysis - In Progress

Denial of Service in RabbitMQ JMS Topic Exchange Plugin

Publication date: 2026-09-25

Last updated on: 2026-09-29

Assigner: GitHub, Inc.

Description

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a client-controlled rjms_erlang_selector binding expression whose LIKE evaluator expanded percent and underscore wildcards into overlapping PCRE fragments. It executed those fragments with raw re:run/3 without match or recursion limits, allowing an authenticated tenant that can bind and publish to consume broker scheduler CPU and deny service with pathological selectors. This issue is fixed in versions 4.0.23, 4.1.14, 4.2.9, and 4.3.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-29

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-67413

EUVD

EUVD-2026-87228

Affected Vendors & Products

Vendor	Product	Version / Range
rabbitmq	rabbitmq_jms_topic_exchange	From 4.0.0 (inc) to 4.0.23 (inc)
rabbitmq	rabbitmq_jms_topic_exchange	4.1.14
rabbitmq	rabbitmq_jms_topic_exchange	4.2.9
rabbitmq	rabbitmq_jms_topic_exchange	4.3.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1333	The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

Attack-Flow Graph

Executive Summary

This vulnerability affects RabbitMQ's optional rabbitmq_jms_topic_exchange plugin. It allows an authenticated user to craft malicious binding expressions with wildcards that consume excessive CPU resources on the broker scheduler, leading to a denial of service.

Detection Guidance

This vulnerability is specific to the rabbitmq_jms_topic_exchange plugin in RabbitMQ versions 4.0.0 to 4.0.23, 4.1.14, 4.2.9, and 4.3.3. To detect it, check the RabbitMQ plugin list for the presence of rabbitmq_jms_topic_exchange and verify the installed version. If the plugin is enabled and the version is within the affected range, the system is vulnerable.

Impact Analysis

If exploited, this vulnerability can cause high CPU usage on the RabbitMQ server, degrading performance or making the service unavailable. It requires an authenticated user with binding and publishing permissions.

Compliance Impact

This vulnerability allows an authenticated attacker to consume excessive CPU resources through malicious binding expressions, potentially causing denial of service. This could impact compliance with GDPR by disrupting data processing operations or HIPAA by affecting availability of critical healthcare systems.

Mitigation Strategies

Upgrade RabbitMQ to fixed versions 4.0.23, 4.1.14, 4.2.9, or 4.3.3 or later to address the issue in the rabbitmq_jms_topic_exchange plugin.

Hi! I’m here to help you understand CVE-2026-67413. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70