CVE-2026-67414
Description
A flaw was found in rabbitmq-server. This vulnerability allows an authenticated remote attacker to cause a Denial of Service (DoS) by exhausting broker memory. When processing Advanced Message Queuing Protocol (AMQP) messages, the parser fails to limit the aggregate number of array elements across an incoming frame, causing small requests to expand into disproportionately large memory allocations. By sending repeated crafted frames, an attacker can trigger system-wide memory alarms, block legitimate message publishing, and disrupt broker availability.
Statement
This vulnerability is rated as Moderate impact because exploitation requires a remote attacker to possess valid credentials to authenticate with the broker, and the resulting impact is limited strictly to service availability. In standard Red Hat architectures, including Red Hat OpenStack Platform, RabbitMQ is deployed within isolated management or internal API networks rather than exposed to untrusted external networks. While an authenticated client can trigger memory exhaustion by transmitting crafted payload frames, the issue does not allow unauthorized data access, privilege escalation, or system compromise.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.5 | N/A | N/A |
| Attack Vector | Network | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
