CVE-2026-67228

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.1

Description The runtime-parameters lookup path coerces the URL :component segment to an atom using the rabbit data coercion:to atom/1 function within lookup component() (deps/rabbit/src/rabbit runtime parameters.erl). This process creates a new atom for any previously unseen value. Since the Erlang atom table is bounded and atoms are not garbage collected, an authorized policymaker can exhaust the atom table by issuing approximately one million requests with distinct component values, causing the node to crash and resulting in a denial of service.

Recommendations Update to version 4.2.7. Update to version 4.3.1.