CVE-2026-106122

The RabbitMQ Java client library (prior to version 5.36.0 ) is vulnerable to a flaw where ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters. These characters can re-encode beyond the AMQP shortstr limit enforced by ValueWriter.writeShortstr. An attacker submitting...

CVE-2026-106122 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...