CVE-2026-67407 | RabbitMQ up to 4.0.22/4.1.13/4.2.8/4.3.2 MQTT Topic Permission escaperegexchar clientid privileges management

A vulnerability labeled as critical has been found in RabbitMQ up to 4.0.22/4.1.13/4.2.8/4.3.2. This impacts the function escaperegexchar of the component MQTT Topic Permission. The manipulation of the argument clientid results in improper privilege management.

This vulnerability is cataloged as CVE-2026-67407. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More