What is CVE-2026-69219?
CVE-2026-69219 is a vulnerability in the RabbitMQ Java client library where `ValueReader.readBytes` improperly validates a wire-declared contentLength, potentially causing memory exhaustion. Users should upgrade to version 5.33.1 or later to mitigate this issue.
Azərbaycanca: CVE-2026-69219 RabbitMQ Java müştəri kitabxanasında aşkar edilən təhlükəsizlik zəifliyidir. Bu zəiflik `ValueReader.readBytes` funksiyası vasitəsilə uzaqdan göndərilən məlumatın ölçüsünü düzgün yoxlamayaraq `OutOfMemoryError` və ya yaddaş tükənməsinə səbəb ola bilər. Təsirə məruz qalan istifadəçilər dərhal kitabxananı 5.33.1 və ya daha yuxarı versiyaya yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
In which component was CVE-2026-69219 discovered and what could its exploitation result in?
CVE-2026-69219 was discovered in the RabbitMQ Java client library. This vulnerability could cause memory exhaustion by improperly validating the size of remotely sent data.
What measure should be taken to protect against CVE-2026-69219?
To protect against this vulnerability, the library should be immediately upgraded to version 5.33.1 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.