RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the operation as successful and continues parsing from the wrong offset. A malicious or compromised broker can provide an oversized longstr in a table field and desynchronize subsequent AMQP parsing, causing attacker-controlled trailing bytes to be interpreted as later fields or frames and disrupting connection integrity and availability. This issue is fixed in version 1.13.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty
    string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning
    ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the operation as
    successful and continues parsing from the wrong offset. A malicious or compromised broker can provide an
    oversized longstr in a table field and desynchronize subsequent AMQP parsing, causing attacker-controlled
    trailing bytes to be interpreted as later fields or frames and disrupting connection integrity and
    availability. This issue is fixed in version 1.13.0. (CVE-2026-77411)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty     string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning     ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the operation as     successful and continues parsing from the wrong offset. A malicious or compromised broker can provide an     oversized longstr in a table field and desynchronize subsequent AMQP parsing, causing attacker-controlled     trailing bytes to be interpreted as later fields or frames and disrupting connection integrity and     availability. This issue is fixed in version 1.13.0. (CVE-2026-77411)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
460154	Echo: github.com/rabbitmq/amqp091-go: security update to 1.13.0	Tenable Cloud Security	Echo Local Security Checks	Local	critical
460154	Echo: github.com/rabbitmq/amqp091-go: security update to 1.13.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
348231	Linux Distros Unpatched Vulnerability : CVE-2026-77411	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-77411

critical

Tenable Plugins

critical

critical

critical