CVE-2026-66074

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-supplied ?name= regular expression to re:run with no match_limit option, and executes it once per resource in the result set. OTP's default 10M match_limit caps each call at roughly 100-200ms, but the regex runs once per resource in the result set. With a large set, for example 5000 queues at 150ms each, a single request consumes 12 or more minutes of CPU. Parallel requests saturate the schedulers. The use_regex=true option is a supported feature on list endpoints, so this path is reachable through normal API use. Preconditions include Any user with the management tag can exploit this.. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0.

• CWE-1333

• https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6
• https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.0
• https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rg5q-vcgf-rfh7

Published

Sep 23, 2026

Last Modified

Sep 24, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-66069RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-6607A security vulnerability has been detected in lm-sys fastcha…5.5
• CVE-2026-66070RabbitMQ is a messaging and streaming broker. Prior to versi…7.6
• CVE-2026-66071RabbitMQ is a messaging and streaming broker. From 3.13.0 un…6
• CVE-2026-66072RabbitMQ is a messaging and streaming broker. Prior to versi…6
• CVE-2026-66073RabbitMQ is a messaging and streaming broker. From 3.13.0 un…6
• CVE-2026-66075RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-66076RabbitMQ is a messaging and streaming broker. Prior to versi…2.3
• CVE-2026-66077RabbitMQ is a messaging and streaming broker. Prior to versi…7.3
• CVE-2026-66078RabbitMQ is a messaging and streaming broker. From 3.13.0 un…2.1
• CVE-2026-66079RabbitMQ is a messaging and streaming broker. Prior to versi…8.2
• CVE-2026-6608A vulnerability was detected in lm-sys fastchat up to 0.2.36…5.5