CVE-2026-67419
HighAdvisory
Published 1 Oct 2026In the index since 2 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.1
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 17,985 indexed, latest versions
- Container images
- 6
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
Carried by container images the latest versions of 14 of 17,985 indexed charts deploy, on 6 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 3.10.7-1, 3.10.8-1, 3.12.14-10, 4.1.2-0+1 more | 4.3.5 | 6 |
| RabbitMQbitnami | 3.12.14-10 | 4.3.5 | 1 |
- OSV records
- BIT-rabbitmq-2026-67419
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.19 | 1See more | — |
| openctihelm-openctiVerified publisher | 3.0.14 | 1See more | — |
| infrahubinfrahubVerified publisher | 4.33.4 | 1See more | — |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.21.1 | 1See more | — |
| squestchristianhuthVerified publisher | 6.6.8 | 1 of 4See more | 11,073 |
| enbuildenbuildVerified publisher | 0.0.50 | 1 of 6See more | 34,052 |
| clowder2ncsaVerified publisher | 1.9.7 | 1 of 12See more | 39,787 |
| arlas-aiasarlas-stackVerified publisher | 28.9.0 | 1 of 22See more | 42,910 |
| hatchet-hahatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| hatchet-stackhatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| openaevhelm-openbasVerified publisher | 2.0.8 | 1 of 7See more | 7,757 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 27,052 |
| ibm-ucv-prodibm-helm | 5.3.0 | 1 of 16See more | 12,575 |
| backendsignalen | 4.25.0 | 1 of 4See more | 11,735 |
Container images carrying it
6 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | rabbitmq | 4.3.5 | 6 |
| bitnamilegacy/ | fac502149c40 | rabbitmq | 4.3.5 | 4 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 4.3.5 | 1 |
| bitnamilegacy/ | 8f7161d8ce19 | rabbitmq | 4.3.5 | 1 |
| bitnamilegacy/ | cf93e2772250 | rabbitmq | 4.3.5 | 1 |
| registry.gitlab.com/ | 5a9334f371f3 | rabbitmq RabbitMQ | 4.3.5 4.3.5 | 1 |