CVE-2026-69220Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively for AMQP table type F and AMQP array type A values without a nesting-depth limit. A malicious AMQP server or network intermediary can send approximately 580 nested table levels in the pre-authentication connection.start frame, fitting within the default 131072-byte frame maximum, to trigger StackOverflowError. The error terminates the client input processing thread and causes denial of service. This issue is fixed in version 5.33.1.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-674

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-69220 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/cl… https://www.cve.org/CVERecord?id=CVE-2026-69220 ----- Traducción: CVE-2026-69220 La … https://infoflow.cloud`
Post summary
The post reports a new CVE (CVE-2026-69220) affecting RabbitMQ Java client libraries prior to version 5.33.1, noting that a newer version contains the fix.
0000023
100 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-69220 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/cl… https://www.cve.org/CVERecord?id=CVE-2026-69220
Post summary
The text announces a new CVE affecting the RabbitMQ Java client library, noting that the issue is fixed in version 5.33.1, but it does not provide any PoC, exploit, or evidence of active exploitation.
000001.1K
58.0K followersView on X

Explore more

Back to dashboard