RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps rabbitdatacoercion:toatom/1 over the user's tags list. The 20 MB management body limit fits ~3-4M short tag strings. An administrator can crash the node in a single request by creating a user (or importing definitions) with ~1M unique tag administrator. This issue is fixed in versions 4.0.22 and 4.1.14 and 4.2.7.
References
Configurations
Configuration 1 (hide)
|
History
20 Oct 2026, 13:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Broadcom rabbitmq Server
Broadcom |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| CPE | cpe:2.3:a:broadcom:rabbitmq_server:*:*:*:*:*:*:*:* | |
| References | () https://github.com/rabbitmq/rabbitmq-server/commit/86601c5a6d1c7e41060e3dbd165c88bdc91266ee - Patch | |
| References | () https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.7 - Release Notes, Patch | |
| References | () https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-34c7-r8w9-5wv8 - Vendor Advisory |
25 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-34c7-r8w9-5wv8 - |
25 Sep 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-25 17:17
Updated : 2026-10-20 13:36
NVD link : CVE-2026-67226
Mitre link : CVE-2026-67226
CVE.ORG link : CVE-2026-67226
JSON object : View
Products Affected
broadcom
- rabbitmq_server
CWE
CWE-400
Uncontrolled Resource Consumption