CVE-2026-79921Patch

LOWCVSS 8.9 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead to unexpected memory consumption or application-layer denial of service (DoS), bypassing the protocol's built-in framing constraints. Version 1.13.0 contains a fix. No known workarounds are available.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets2 URLs

By indicator

Full discourse1 post

Upwind Security MDR@UpwindMDR45d
Patch
🚨High - amqp091-go Oversized Content Body Frame Memory DoS (CVE-2026-79921) In http://github.com/rabbitmq/amqp091-go, the client trusts broker-declared content body frame payload sizes even when exceeding the negotiated frame_max, allocating memory and processing the oversized body. A malicious/compromised broker can trigger excessive memory consumption leading to application-layer DoS. 👉Affected: http://github.com/rabbitmq/amqp091-go < 1.13.0 | Upgrade to 1.13.0
Post summary
A high‑severity memory DoS flaw (CVE‑2026‑79921) in rabbitmq/amqp091‑go occurs when an attacker broker sends oversized content frames; the advisory recommends upgrading to version 1.13.0.
0000062
301 followersView on X

Explore more

Back to dashboard