RabbitMQ is a messaging and streaming broker.
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmq_mqtt/src/rabbit_mqtt_packet.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated publisher with topic write permission can cause the broker to store and route that inapplicable property to a separately authenticated matching subscriber. When the subscriber path serializes the outbound PUBLISH, serialise_prop/2 has no matching clause, and the uncontained function_clause exception
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Erlang/OTP
- Product
- Erlang/OTP, Message brokers
- Exposure class
- Developer platform, Database
Why it ranks 5 (Routine)
- Product class: developer platform, database
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-67418 on this site · NVD · CVE.org · Vulnpedia