Issues

• dynamic-security getGroup reply aliases client->username, freed by deleteClient in the same $CONTROL batch

  Status: Available
  eclipse-mosquitto/mosquitto#3783 · Filter by author qzqdz opened on Oct 29, 2026

• mosquitto fails to run under a windows service if the service name has a space in it

  Status: Available
  eclipse-mosquitto/mosquitto#3781 · Filter by author BJWoodward opened on Oct 28, 2026

• Built-in WebSockets: a frame sent while a client's continuation frame is being read carries opcode 0 (continuation), failing browser clients (RFC 6455 §5.4)

  Status: Available
  eclipse-mosquitto/mosquitto#3780 · Filter by author francisdesjardins opened on Oct 27, 2026

• persist-sqlite restore trusts payloadlen over blob size and reads out of bounds

  Status: Available
  eclipse-mosquitto/mosquitto#3777 · Filter by author qzqdz opened on Oct 26, 2026

• ACL: Allow to override read/write by read on sub-topics

  Status: Available
  eclipse-mosquitto/mosquitto#3773 · Filter by author tvogel opened on Oct 20, 2026

• acl-file: SUBSCRIBE is never checked, so a client can join another client's shared subscription group and make its messages vanish

  Status: Available
  eclipse-mosquitto/mosquitto#3772 · Filter by author JCAguilera opened on Oct 20, 2026

• retained message not received on re-subscription if the broker is busy with other large payload

  Status: Available
  eclipse-mosquitto/mosquitto#3771 · Filter by author kaerimf opened on Oct 19, 2026

• Dynamic security: allow configuring PBKDF2 iterations, or accept a pre-hashed encoded_password in $CONTROL commands

  Status: Available
  eclipse-mosquitto/mosquitto#3769 · Filter by author ryangriggs opened on Oct 16, 2026

• Per-client / per-role publish limits (rate and message size) in Dynamic Security

  Status: Available
  eclipse-mosquitto/mosquitto#3766 · Filter by author kzajac83 opened on Oct 7, 2026
  1

• Persistence plugins: will-delete callbacks are called with MOSQ_EVT_PERSIST_WILL_ADD

  Status: Available
  eclipse-mosquitto/mosquitto#3765 · Filter by author nejeoui opened on Oct 4, 2026

• Broker busy loops (100% CPU) while a TLS bridge waits for the handshake

  Status: Available
  eclipse-mosquitto/mosquitto#3764 · Filter by author rskaliotis opened on Oct 3, 2026

• Snapshot → persist-sqlite migration loses all queued messages (db_dump --json storeid) and aborts on clients without a username

  Status: Available
  eclipse-mosquitto/mosquitto#3763 · Filter by author nejeoui opened on Oct 3, 2026

• A crash can resume sessions that the client had already ended (rollback of batched/periodic persistence)

  Status: Available
  eclipse-mosquitto/mosquitto#3761 · Filter by author nejeoui opened on Oct 3, 2026

• persist-sqlite: the Will of a client connected at shutdown is published again after restart (Will not removed once published)

  Status: Available
  eclipse-mosquitto/mosquitto#3760 · Filter by author nejeoui opened on Oct 3, 2026

• Built-in persistence does not save sessions created with Clean Start 1 and Session Expiry Interval > 0

  Status: Available
  eclipse-mosquitto/mosquitto#3759 · Filter by author nejeoui opened on Oct 3, 2026

• persist-sqlite: restored in-flight messages lose their state (DUP=0 on QoS 1 re-delivery; QoS 2 PUBLISH replayed after PUBREL)

  Status: Available
  eclipse-mosquitto/mosquitto#3758 · Filter by author nejeoui opened on Oct 3, 2026
  1

• Inverted quota check in db__message_release_incoming() promotes all queued incoming QoS2 messages, violating Receive Maximum

  Status: Available
  eclipse-mosquitto/mosquitto#3750 · Filter by author huoyuxi opened on Sep 29, 2026

• mosquitto_want_write() can wrongfully return true

  Status: Available
  eclipse-mosquitto/mosquitto#3745 · Filter by author dirkfeytons opened on Sep 21, 2026
  1

• Message Expiry Interval deletes a QoS 2 exchange that has already passed PUBREC, so the owed PUBREL is never resent

  Status: Available
  eclipse-mosquitto/mosquitto#3744 · Filter by author gcf3711 opened on Sep 21, 2026

• A DISCONNECT carrying a reserved Reason Code is treated as a normal disconnection, so the Will Message is discarded

  Status: Available
  eclipse-mosquitto/mosquitto#3743 · Filter by author gcf3711 opened on Sep 21, 2026

• Windows 11: mosquitto_signal config-reload returns success but config is not reloaded when broker runs as a service

  Status: Available
  eclipse-mosquitto/mosquitto#3742 · Filter by author mpeterek opened on Sep 18, 2026
  1

• Add an option to disconnect with Will Message

  Status: Available
  eclipse-mosquitto/mosquitto#3740 · Filter by author scaiper opened on Sep 13, 2026

• Integer overflow in mosquitto_pub

  Status: Available
  eclipse-mosquitto/mosquitto#3736 · Filter by author scaiper opened on Sep 6, 2026

• 2.1.2: mosquittopp_static is built with empty ${C_SRC} and ${LIBRARIES} (WITH_STATIC_LIBRARIES=ON fails to compile)

  Status: Available
  eclipse-mosquitto/mosquitto#3733 · Filter by author AndreasWinter19 opened on Sep 4, 2026

• 2.1: restored bridge session is expired at startup, before bridges are started

  Status: Available
  eclipse-mosquitto/mosquitto#3728 · Filter by author s-wouters opened on Aug 26, 2026