CVE-2026-26445: Stomper vulnerability
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll (EPOLLET) and MSGPEEK in recv(), causes sockets to enter a permanent half-read state. When enough such connections accumulate, the broker stops receiving any further epoll events for those sockets and eventually hangs in epollwait, effectively refusing to process new messages.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to act as a client that can establish TCP connections to the broker and send partial STOMP frames while keeping those connections open. The issue is triggered by accumulating enough such connections.
What is the operational impact?
Affected sockets can enter a permanent half-read state, after which the broker no longer receives further epoll events for them. As these connections accumulate, the broker can hang in epoll_wait and stop processing new messages.