CVE-2026-67225

A flaw was found in rabbitmq-server. The stream protocol fails to validate the declared length of incoming frames against the negotiated maximum frame size before buffering them into memory. When the stream plugin is enabled, a remote attacker can exploit this issue by declaring an oversized fram...