{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"MEDIUM"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"An authenticated tenant that is allowed to bind and publish to an `x-jms-topic` exchange can repeatedly consume RabbitMQ scheduler CPU while messages are routed. This delays publisher confirms and competes with unrelated broker work on the same node. The attacker can amplify the effect by publishing more messages or using multiple bindings, channels, or connections. The issue does not provide message disclosure, privilege escalation, or code execution. Its demonstrated impact is availability degradation. The reproduction establishes substantial per-message CPU amplification but does not claim that a single test connection alone causes a complete node outage.",
				"category":"general",
				"title":"Synopsis"
			}
		],
		"publisher":null,
		"references":[
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67409"
			},
			{
				"summary":"CVE-2026-67409 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-67409.json"
			},
			{
				"summary":"openEuler-SA-2026-4032",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4032"
			},
			{
				"summary":"CVE-2026-67409",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-67409&packageName=rabbitmq-server"
			}
		],
		"title":"openEuler cve CVE-2026-67409",
		"tracking":{
			"initial_release_date":"2026-09-30T16:03:29+08:00",
			"revision_history":[
				{
					"date":"2026-09-30T16:03:29+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-09-30T16:03:29+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-09-30T16:03:29+08:00",
			"id":"CVE-2026-67409",
			"version":"1.0.0",
			"status":"interim"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"openEuler-24.03-LTS-SP3",
									"name":"openEuler-24.03-LTS-SP3"
								},
								"name":"openEuler-24.03-LTS-SP3",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"rabbitmq-server-3.9.23-4.oe2403sp3.aarch64.rpm",
									"name":"rabbitmq-server-3.9.23-4.oe2403sp3.aarch64.rpm"
								},
								"name":"rabbitmq-server-3.9.23-4.oe2403sp3.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"rabbitmq-server-3.9.23-4.oe2403sp3.src.rpm",
									"name":"rabbitmq-server-3.9.23-4.oe2403sp3.src.rpm"
								},
								"name":"rabbitmq-server-3.9.23-4.oe2403sp3.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"rabbitmq-server-3.9.23-4.oe2403sp3.x86_64.rpm",
									"name":"rabbitmq-server-3.9.23-4.oe2403sp3.x86_64.rpm"
								},
								"name":"rabbitmq-server-3.9.23-4.oe2403sp3.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"rabbitmq-server-3.9.23-4.oe2403sp3.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.aarch64",
					"name":"rabbitmq-server-3.9.23-4.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"rabbitmq-server-3.9.23-4.oe2403sp3.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.src",
					"name":"rabbitmq-server-3.9.23-4.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"rabbitmq-server-3.9.23-4.oe2403sp3.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.x86_64",
					"name":"rabbitmq-server-3.9.23-4.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-67409",
			"notes":[
				{
					"text":"An authenticated tenant that is allowed to bind and publish to an `x-jms-topic` exchange can repeatedly consume RabbitMQ scheduler CPU while messages are routed. This delays publisher confirms and competes with unrelated broker work on the same node. The attacker can amplify the effect by publishing more messages or using multiple bindings, channels, or connections. The issue does not provide message disclosure, privilege escalation, or code execution. Its demonstrated impact is availability degradation. The reproduction establishes substantial per-message CPU amplification but does not claim that a single test connection alone causes a complete node outage.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.aarch64",
					"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.src",
					"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.x86_64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.src",
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.x86_64"
					],
					"details":"rabbitmq-server security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4032"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":5.9,
						"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.src",
						"openEuler-24.03-LTS-SP3:rabbitmq-server-3.9.23-4.oe2403sp3.x86_64"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-67409"
		}
	]
}