CVE-2026-67228

A flaw was found in RabbitMQ. An authorized policymaker can exploit this vulnerability by issuing a large number of requests with distinct component values to the runtime-parameters lookup path. This action coerces attacker-supplied strings into new atoms, eventually exhausting the Erlang atom table. Successful exploitation leads to a denial of service by crashing the RabbitMQ node.

Last checked: 2026-09-29 04:06 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 02:16 UTC)

References

• NVD: CVE-2026-67228
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-09-24 13:17 UTC