StackRadar

CVE-2026-67418

Medium

Advisory

Published 21 Oct 2026In the index since 22 Oct 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 18,232 indexed, latest versions
Container images
5
deployed by those charts
Fix available
1 of 1
affected package

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

Carried by container images the latest versions of 12 of 18,232 indexed charts deploy, on 5 images.

Affected packageAffected versionsFixed inImages
rabbitmqbitnami3.13.7-0, 4.1.2-0, 4.1.3-0, 4.2.2-03.13.195
OSV records
BIT-rabbitmq-2026-67418
Also known as
GHSA-jv99-v328-mvmm

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
codefreshcodefresh-onpremOfficialVerified publisher2.12.231 of 42See more

codefresh codefresh-onprem 2.12.23

1 of the 42 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.39e635efba431
rabbitmq@4.1.3-0
3.13.19

Open the chart page →

71,186
openctihelm-openctiVerified publisher3.0.241 of 8See more

opencti helm-opencti 3.0.24

1 of the 8 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
rabbitmq@4.1.2-0
3.13.19

Open the chart page →

3,781
infrahubinfrahubVerified publisher4.34.11 of 5See more

infrahub infrahub 4.34.1

1 of the 5 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
rabbitmq@4.1.3-0
3.13.19

Open the chart page →

12,678
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.22.11 of 5See more

infrahub-enterprise infrahub-enterprise 4.22.1

1 of the 5 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
rabbitmq@4.1.3-0
3.13.19

Open the chart page →

12,828
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
rabbitmq@3.13.7-0
3.13.19

Open the chart page →

64,844
arlas-aiasarlas-stackVerified publisher28.10.01 of 22See more

arlas-aias arlas-stack 28.10.0

1 of the 22 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
rabbitmq@4.1.2-0
3.13.19

Open the chart page →

157,418
hatchet-hahatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-ha hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
rabbitmq@4.1.3-0
3.13.19

Open the chart page →

9,829
hatchet-stackhatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-stack hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
rabbitmq@4.1.3-0
3.13.19

Open the chart page →

9,829
openaevhelm-openbasVerified publisher2.0.171 of 7See more

openaev helm-openbas 2.0.17

1 of the 7 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
rabbitmq@4.1.2-0
3.13.19

Open the chart page →

80,323
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
rabbitmq@4.1.2-0
3.13.19

Open the chart page →

85,165
ibm-ucv-prodibm-helm5.3.01 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

1 of the 16 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2fac502149c40
rabbitmq@4.1.2-0
3.13.19

Open the chart page →

14,016
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-67418.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
rabbitmq@4.2.2-0
3.13.19

Open the chart page →

3,367

Container images carrying it

5 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
rabbitmq@4.1.3-0
3.13.19
5
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
rabbitmq@4.1.2-0
3.13.19
4
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
rabbitmq@4.1.2-0
3.13.19
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
rabbitmq@3.13.7-0
3.13.19
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
rabbitmq@4.2.2-0
3.13.19
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.