CVE-2026-77412

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0

Description A flaw in the readField() function allows a malicious or compromised AMQP broker to trigger an unhandled runtime panic, leading to a Denial of Service (DoS) by crashing the client process. The issue occurs when the client parses byte-array fields with type tag x; the readField() function reads the field length into a signed int32 and passes it to the make() function for buffer allocation. If the broker sends a value such as 0xFFFFFFFF, it is interpreted as -1, causing a len out of range runtime panic. This can be exploited during the connection.start handshake server properties or during message header table parsing.

Recommendations Update RabbitMQ amqp091-go to version 1.13.0 or later.