PT-2026-44002 · Rabbitmq · Rabbitmq

Retpoline · Published 2026-05-27 · Updated 2026-06-04 · CVE-2026-44838

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.3

Description The MQTT plugin in RabbitMQ allows topic-level authorization using regular expressions with variable substitution. When administrators use patterns like ^{client id}-sensors$ to restrict access, the client id provided by the user in the MQTT CONNECT packet is inserted into the regex pattern without escaping special characters. This allows an authenticated MQTT user to inject regex operators and bypass authorization.

Recommendations Update to version 4.2.4 or 4.3.0.

Fix

DoS

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BIT-RABBITMQ-2026-44838

CVE-2026-44838

Affected Products

Rabbitmq

References · 7

• https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-x866-xp2g-cx8v · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44838 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44838 · Security Note
• https://osv.dev/vulnerability/BIT-rabbitmq-2026-44838 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44838 · Security Note
• https://ubuntu.com/security/CVE-2026-44838 · Vendor Advisory
• https://t.me/cveNotify/166032 · Telegram Post