CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name (and the exchanges and bindings endpoints) accepts a node JSON field. The value goes through rabbitnodes:make → listtoatom with no cluster membership check first. Each unique value permanently leaks one atom. A March 2026 refactoring (ea61ce2563) introduced safe helpers in rabbitmgmtnodes.erl (parsenodename, safeatom, and requirenodename, using binarytoexistingatom) and fixed several callers (QQ replica ops, wmauthattempts, wmnodememoryets, getsortreverse, and rabbitfederationmgmt), but getnode/1 in rabbitmgmtutil.erl:880-885, the primary vector used by directrequest/6, was not Roughly 900K requests crash the VM via systemlimit, and all tenants lose Any user with the management tag and one vhost, the lowest privilege This issue is fixed in versions 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6.

• CWE-400

• https://github.com/rabbitmq/rabbitmq-server/commit/7f64311471840e68f8cae09e4d4fdc4c8aca9229
• https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6
• https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-6v53-r759-jrvx

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-66068RabbitMQ is a messaging and streaming broker. Prior to versi…5.6
• CVE-2026-66069RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-6607A security vulnerability has been detected in lm-sys fastcha…5.5
• CVE-2026-66070RabbitMQ is a messaging and streaming broker. Prior to versi…7.6
• CVE-2026-66071RabbitMQ is a messaging and streaming broker. From 3.13.0 un…6
• CVE-2026-66072RabbitMQ is a messaging and streaming broker. Prior to versi…6
• CVE-2026-66074RabbitMQ is a messaging and streaming broker. Prior to versi…6
• CVE-2026-66075RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-66076RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-66077RabbitMQ is a messaging and streaming broker. Prior to versi…7.3
• CVE-2026-66078RabbitMQ is a messaging and streaming broker. From 3.13.0 un…2.1
• CVE-2026-66079RabbitMQ is a messaging and streaming broker. Prior to versi…8.2