CVE-2026-57220

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.6

Description The RabbitMQ stream listener fails to enforce the configured stream frame-size limit when assembling frames during authentication and before Tune negotiation. This allows an unauthenticated remote client to declare oversized frame lengths, leading to excessive memory consumption within rabbit stream core and potentially causing a Denial of Service (DoS), which is a condition where the service becomes unavailable to legitimate users.

Recommendations Update to version 4.2.6.