Vulnerability Description
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a client-controlled rjms_erlang_selector binding expression whose LIKE evaluator expanded percent and underscore wildcards into overlapping PCRE fragments. It executed those fragments with raw re:run/3 without match or recursion limits, allowing an authenticated tenant that can bind and publish to consume broker scheduler CPU and deny service with pathological selectors. This issue is fixed in versions 4.0.23, 4.1.14, 4.2.9, and 4.3.3.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Rabbitmq Server | >= 4.0.0, < 4.0.23 |
Related Weaknesses (CWE)
References
- https://github.com/rabbitmq/rabbitmq-server/commit/20203c50ea6ff459d462b2d435532Patch
- https://github.com/rabbitmq/rabbitmq-server/commit/60de2fbbcd812ab294985cef260ccPatch
- https://github.com/rabbitmq/rabbitmq-server/commit/9e36b7f4c1e2eed77300288dca3e0Patch
- https://github.com/rabbitmq/rabbitmq-server/commit/f4d9da668b7304dfb9aeb2b4e9ff7Patch
- https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.9Release Notes
- https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.3Release Notes
- https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-chxf-3hfg-jVendor AdvisoryExploit
- https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-chxf-3hfg-jVendor AdvisoryExploit
FAQ
What is CVE-2026-67413?
CVE-2026-67413 is a vulnerability with a CVSS score of 6.5 (MEDIUM). RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a client-controlled rjm...
How severe is CVE-2026-67413?
CVE-2026-67413 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-67413?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Rabbitmq Server.