CVE-2026-67225

Undergoing Analysis Undergoing Analysis - In Progress

Denial of Service in RabbitMQ Stream Protocol

Publication date: 2026-09-25

Last updated on: 2026-09-28

Assigner: GitHub, Inc.

Description

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated during the Tune handshake but did not compare it with an inbound frame's declared length before buffering the frame. With the stream plugin enabled, a remote client could therefore cause excessive memory pressure and denial of service by declaring an oversized frame. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-28

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-67225

EUVD

EUVD-2026-87145

Affected Vendors & Products

Vendor	Product	Version / Range
rabbitmq	rabbitmq	From 3.13.0 (inc) to 3.13.15 (inc)
rabbitmq	rabbitmq	4.0.20
rabbitmq	rabbitmq	4.1.11
rabbitmq	rabbitmq	4.2.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

RabbitMQ is a messaging broker. Between versions 3.13.0 and 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol did not validate frame lengths against the negotiated FrameMax value before buffering. This allowed remote clients to send oversized frames, causing excessive memory usage and denial of service when the stream plugin was enabled.

Detection Guidance

This vulnerability can be detected by checking the RabbitMQ version against the fixed releases (3.13.15, 4.0.20, 4.1.11, or 4.2.6). Use commands like 'rabbitmqctl status' or 'rabbitmq-diagnostics status' to check the version. If the version is below these, the system is vulnerable.

Impact Analysis

If you use RabbitMQ with the stream plugin enabled in affected versions, a remote attacker could exploit this to consume excessive server memory, leading to performance degradation or complete service outages.

Compliance Impact

This vulnerability could lead to denial of service due to excessive memory pressure, which may impact the availability of RabbitMQ services. For compliance standards like GDPR or HIPAA, which require data availability and integrity, such disruptions could potentially violate availability requirements.

Mitigation Strategies

Upgrade RabbitMQ to versions 3.13.15, 4.0.20, 4.1.11, or 4.2.6 or later to address the vulnerability. Disable the stream plugin if not needed to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-67225. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70