CVE-2026-61634

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.0

Description The AMQP connection tuning path records the negotiated AMQP frame max value, but SocketFrameHandler.java and NettyFrameHandlerFactory validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the negotiated limit is not consistently applied through setMaxInboundFramePayloadSize(). A malicious or compromised broker can send a method frame exceeding the negotiated frame max during or after connection establishment. This causes the client to allocate and decode a protocol-invalid frame instead of rejecting it with a MalformedFrameException, leading to a protocol violation that can disrupt the connection and cause a client-side denial of service.

Recommendations Update to version 5.33.0.