CVE-2026-44838

描述

RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. Administrators can create patterns such as ^{client_id}-sensors$ to restrict user access to topics that include their client ID. However, the client_id is provided by the user in the MQTT CONNECT packet and is inserted into the regex pattern without escaping special regex characters. This flaw enables an authenticated MQTT user to inject regex operators to bypass authorization. This vulnerability is fixed in 4.2.4 and 4.3.0.

如何修補 CVE-2026-44838

要修補 CVE-2026-44838,請將受影響套件升級到下列已修補版本。

• —升級至 4.2.4 或更新版本

CVE-2026-44838 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 4.2.0, < 4.2.4

CVSS 分數

參考連結(2)

• WEBgithub.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-x866-xp2g-cx8v
• WEBnvd.nist.gov/vuln/detail/CVE-2026-44838