CVE-2026-77410

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0

Description A flaw in the recvContent() function allows a malicious or compromised AMQP broker to trigger an Out-of-Memory (OOM) error, which is a state where the system lacks enough memory to perform operations, forcing the host operating system or container runtime to terminate the client process. The issue occurs because the client pre-allocates the message body slice using the ch.header.Size variable supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. By sending an extreme declared body size, an attacker can cause the Go runtime to attempt a massive memory allocation, exhausting system resources and destroying application availability.

Recommendations Update RabbitMQ amqp091-go to version 1.13.0.