CVE-2026-77410
RabbitMQ amqp091-go client preallocates message bodies from an unchecked declared size
Technology
RabbitMQ
CVSS Score
8.9 / 10.0
Affected Versions
amqp091-go before 1.13.0
Upstream Fix
amqp091-go 1.13.0
Published
September 16, 2026
OSSeva Coverage
Fixed upstream
Description
Channel.recvContent allocates the body buffer from the size in the content header without capping it to the negotiated frame size. A malicious or compromised broker can declare an extreme body size and make the Go runtime attempt the allocation before any body data arrives, which can exhaust memory and end the client process.
Is your RabbitMQ deployment affected?
If you're running amqp091-go before 1.13.0, you need this patch. Book a discovery call to get covered.
Get a quote
Running RabbitMQ amqp091-go before 1.13.0?
Send your work email and a senior engineer will tell you whether this CVE applies to your versions and who patches it. Reply within 1 business day.
Prefer to talk or read more first?