THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-qx7j-jv8m-fppr (medium) — RabbitMQ Java client malformed body frame triggers raw command assembler exception

[GHSA] GHSA-qx7j-jv8m-fppr (medium) — RabbitMQ Java client malformed body frame triggers raw command assembler exception

medgithub_advisoriesPublished 2026-08-18

GHSA-qx7j-jv8m-fppr Severity: medium CVE: CVE-2026-63335

RabbitMQ Java client malformed body frame triggers raw command assembler exception

### Summary RabbitMQ Java Client's inbound AMQP command assembly accepts a content header declaring a small body and then processes a larger body frame by throwing a raw `UnsupportedOperationException` from `CommandAssembler`. A broker peer that the client h

Indicators of compromise

CVE-2026-63335cve
CVE-2017-15699cve

Original source: https://github.com/advisories/GHSA-qx7j-jv8m-fppr