diff --git a/changes/ce/fix-10172.en.md b/changes/ce/fix-10172.en.md
new file mode 100644
index 000000000..14757e44d
--- /dev/null
+++ b/changes/ce/fix-10172.en.md
@@ -0,0 +1,9 @@
+Fix the incorrect default ACL rule, which was:
+```
+{allow, {username, "^dashboard?"}, subscribe, ["$SYS/#"]}.
+```
+
+However, it should use `{re, "^dashboard?"}` to perform a regular expression match:
+```
+{allow, {username, {re,"^dashboard?"}}, subscribe ,["$SYS/#"]}.
+```
diff --git a/changes/ce/fix-10172.zh.md b/changes/ce/fix-10172.zh.md
new file mode 100644
index 000000000..b4a405c4c
--- /dev/null
+++ b/changes/ce/fix-10172.zh.md
@@ -0,0 +1,8 @@
+修复错误的默认 ACL 规则，之前是：
+```
+{allow, {username, "^dashboard?"}, subscribe, ["$SYS/#"]}.
+```
+但执行正则表达式的匹配应该使用 `{re, "^dashboard?”}`：
+```
+{allow, {username, {re, "^dashboard?"}}, subscribe, ["$SYS/#"]}.
+```