A malicious AMQP broker can send content body frames that exceed the negotiated frame_max limit. The amqp091-go client library will allocate memory to buffer these frames and process them, causing unbounded memory consumption and application‑layer denial of service. This flaw, classified as CWE‑770, allows an attacker to bypass the protocol’s framing constraints and force the client to use resources beyond the intended limits, potentially crashing or degrading the application.

The affected product is the RabbitMQ Go client library amqp091-go. All deployments using versions prior to 1.13.0 are susceptible. The fix was released in version 1.13.0. Clients that rely on older releases and connect to compromised or malicious brokers are at risk.

The CVSS score of 8.9 marks the vulnerability as high severity. EPSS is not available, and the flaw is not listed in the CISA KEV catalog. Exploitation requires the attacker to have control over the AMQP broker that can inject oversized frames; once this is achieved, the broker can trigger memory exhaustion on the client side, potentially causing the application to crash or become unresponsive. The attack can be carried out over the network from the broker to the client, making remote attackers who can manipulate broker traffic a direct threat.