CVE-2026-88763 is a denial of service vulnerability in the skupper-router component of Red Hat Service Interconnect. The issue occurs when the router processes a specially crafted AMQP network message. Due to a lack of recursion depth limits in the AMQP field parser, the router can run out of stack memory and crash. Exploitation requires possession of a valid x.509 certificate signed by the internal network's certificate authority, limiting the attack surface. The vulnerability is classified under CWE-674 (Uncontrolled Recursion).

Successful exploitation results in the skupper-router process crashing, causing a denial of service for the interconnected network. There is no impact on confidentiality or integrity. The attack complexity is high and no privileges or user interaction are required beyond having a valid internal certificate.

Red Hat has assessed this vulnerability as Moderate and requires a valid internal x.509 certificate for exploitation. No patch or fix is currently available as per the vendor advisory. Patch status is not yet confirmed — check the Red Hat advisory for current remediation guidance. Until a fix is released, restrict access to valid certificates and monitor for unusual router crashes.