This failure leaves the unprocessed payload in the TCP stream, causing the parser to become desynchronized from the actual frame boundaries. As subsequent read operations occur, the parser interprets attacker-controlled bytes as valid AMQP frame headers. This alignment shift allows an unauthenticated attacker to inject malicious AMQP frames - such as channel management or message publication commands - leading to potential connection hijacking or remote code execution within the application context.

Impact

The vulnerability affects any Go-based application utilizing the rabbitmq/amqp091-go library for AMQP communication. Successful exploitation allows for complete bypass of the AMQP protocol state machine, enabling attackers to issue unauthorized commands or extract data processed by the library. This poses a significant risk to messaging infrastructure relying on the library for secure inter-service communication.

Recommendation

• Upgrade the amqp091-go package to version 1.13.0 or later immediately.
• Audit network traffic logs for oversized string length parameters in AMQP payloads if deep packet inspection (DPI) or custom application-layer logging is available.
• Implement strict input validation at the application firewall level if upgrading is not immediately feasible, specifically targeting AMQP frame structures with anomalous length values.