Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/rabbitmq/amqp091-go | go | < 1.13.0 | 1.13.0 |
Miggo AIRoot Cause AnalysisThe vulnerability, CVE-2026-79921, describes a scenario where the amqp091-go client fails to enforce the negotiated frame_max limit, allowing a malicious broker to send oversized content body frames. This leads to excessive memory allocation and potential Denial of Service (DoS). The provided commit 6beb7b51f59e46ddcf8066ad498dad32491d3be0 shows a change in connection.go within the Connection.openTune function. Specifically, the line responsible for setting c.Config.FrameSize was modified from directly using pick to calling a new negotiateFrameSize function. The original line, - c.Config.FrameSize = pick(config.FrameSize, int(tune.FrameMax)), is the point where the vulnerable logic resided, as it did not properly validate or enforce the frame size against the AMQP minimum, thus allowing the client to accept and process potentially malicious oversized frames. The negotiateFrameSize function was added as a fix to correctly enforce the frameMinSize.
Connection.openTuneconnection.go