Vulnerability Description
Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap use-after-free during StompClient destruction, causing the broker process to crash. An unauthenticated client can exploit this to reliably trigger a denial of service.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/mdoi/stomper
- https://github.com/songxpu/bug_report/blob/master/Stomp/stomper_vuln3.md
- https://github.com/songxpu/bug_report/blob/master/Stomp/stomper_vuln3.md
FAQ
What is CVE-2026-26447?
CVE-2026-26447 is a vulnerability with a CVSS score of 7.5 (HIGH). Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker perf...
How severe is CVE-2026-26447?
CVE-2026-26447 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-26447?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.