Null Pointer Dereference in Packetbeat AMQP Protocol Parser

CVE-2026-115297

What is CVE-2026-115297?

A null pointer dereference vulnerability exists in the AMQP protocol parser of Packetbeat that allows an unauthenticated attacker to cause a denial of service by sending specially crafted network traffic. This vulnerability can trigger a Go runtime panic, thereby terminating the Packetbeat process without requiring AMQP authentication. It's important to ensure Packetbeat is securely configured to mitigate the risks associated with this fault, as it collects network telemetry only when running.

References