Maven/com.rabbitmq:amqp-client CVE-2026-106122: high 7.5, EPSS 0.49%

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

Action: Upgrade com.rabbitmq:amqp-client to 5.36.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-7822-rcf6-97fx
• nvd: CVE-2026-106122
• https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-7822-rcf6-97fx
• https://github.com/rabbitmq/rabbitmq-java-client/pull/2065
• https://github.com/rabbitmq/rabbitmq-java-client/commit/b8bd750fa8c90690e859b18d6343b34421309020
• https://github.com/rabbitmq/rabbitmq-java-client
• https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.36.0

CVE-2026-106122 · published 2026-10-07T20:25:29Z · modified 2026-10-07T20:30:07.156315722Z · JSON