{
  "cveId": "CVE-2026-67225",
  "url": "https://patchblox.com/security/cve/CVE-2026-67225",
  "summary": "CVE-2026-67225 is fixed in rabbitmq-server on 1 platform by DEBIAN-CVE-2026-67225 (version 4.3.0-2), released September 26, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "RabbitMQ: Stream-protocol frame length never validated against frame_max",
  "description": "RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated during the Tune handshake but did not compare it with an inbound frame\u0027s declared length before buffering the frame. With the stream plugin enabled, a remote client could therefore cause excessive memory pressure and denial of service by declaring an oversized frame. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.",
  "published": "2026-09-25T17:17:10Z",
  "severity": "Moderate",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "Allocation of Resources Without Limits or Throttling",
  "epss": 0.00343,
  "epssPercentile": 0.2807,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67225",
  "fixes": [
    {
      "platform": "linux",
      "product": "rabbitmq-server",
      "release": "Debian 14",
      "fixedVersion": "4.3.0-2",
      "fix": "DEBIAN-CVE-2026-67225",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-67225",
      "released": "2026-09-26T19:52:05Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}