CVE-2026-67238

A flaw was found in RabbitMQ, a messaging and streaming broker. An authenticated AMQP (Advanced Message Queuing Protocol) client can trigger an atom-table exhaustion by sending specially crafted reply-to queue names for decoding. This can lead to the entire Erlang Virtual Machine (VM) crashing, resulting in a Denial of Service (DoS) for all connected services and users.

Last checked: 2026-09-24 17:00 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-24 13:58 UTC)

References

• NVD: CVE-2026-67238
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-09-24 13:17 UTC