Skip to content
Linuxfoundation Nats-server vulnerabilities
-
linuxfoundation nats-server
NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
CVE-2026-58208
Fix available
6.8 Medium
-
linuxfoundation nats-server
NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions
CVE-2026-58211
Fix available
5.4 Medium
-
linuxfoundation nats-server
NATS Server: Remote crash via integer overflow in Connz pagination
CVE-2026-58207
Fix available
7.7 High
-
linuxfoundation nats-server
NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory
CVE-2026-58210
Fix available
7.5 High
-
linuxfoundation nats-server
NATS Server: MQTT retained and QoS replay bypass subscribe deny filters
CVE-2026-58209
Fix available
4.3 Medium
-
linuxfoundation nats-server
NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)
CVE-2026-58214
Fix available
4.3 Medium
-
linuxfoundation nats-server
NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check
CVE-2026-58254
Fix available
5.3 Medium
-
linuxfoundation nats-server
NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
CVE-2026-58213
Fix available
7.1 High
-
linuxfoundation nats-server
NATS Server: Pre-auth server crash via double INFO in leafnode handshake
CVE-2026-58250
Fix available
7.5 High
-
linuxfoundation nats-server
NATS Server: Subscribe Authz Bypass via Wildcard-Overlap
CVE-2026-58252
Fix available
6.5 Medium
-
linuxfoundation nats-server
NATS Server: Route API Auth Bypass
CVE-2026-58253
Fix available
8.8 High
-
linuxfoundation nats-server
NATS Server: Queue Subscribe Authz Bypass
CVE-2026-58251
Fix available
6.5 Medium
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
CVE-2026-27889
Fix available
7.5 High
-
linuxfoundation nats-server
NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching
CVE-2026-33248
Fix available
4.2 Medium
-
linuxfoundation nats-server
NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers
CVE-2026-33246
Fix available
6.4 Medium
-
linuxfoundation nats-server
NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing
CVE-2026-33223
Fix available
6.4 Medium
-
linuxfoundation nats-server
NATS JetStream has an authorization bypass through its Management API
CVE-2026-33222
Fix available
4.9 Medium
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS is vulnerable to pre-auth DoS through WebSockets client service
CVE-2026-33219
Fix available
5.3 Medium
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS has pre-auth server panic via leafnode handling
CVE-2026-33218
Fix available
7.5 High
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS allows MQTT clients to bypass ACL checks
CVE-2026-33217
Fix available
7.1 High
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS has MQTT plaintext password disclosure
CVE-2026-33216
Fix available
8.6 High
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS Server panic via malicious compression on leafnode port
CVE-2026-29785
Fix available
7.5 High
-
linuxfoundation nats-server
NATS is vulnerable to MQTT hijacking via Client ID
CVE-2026-33215
Fix available
6.5 Medium
-
linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more
NATS credentials are exposed in monitoring port via command-line argv
CVE-2026-33247
Fix available
7.4 High
-
linuxfoundation nats-server
NATS: Message tracing can be redirected to arbitrary subject
CVE-2026-33249
Fix available
4.3 Medium
-
linuxfoundation nats-server
nats-server websockets are vulnerable to pre-auth memory DoS
CVE-2026-27571
Fix available
5.9 Medium
-
linuxfoundation nats-server, nats nkeys +1 more
xkeys Seal encryption used fixed key for all encryption
CVE-2023-46129
Fix available
7.5 High
-
linuxfoundation nats-server
NATS.io: Adding accounts for just the system account adds auth bypass
CVE-2023-47090
Fix available
6.5 Medium
-
linuxfoundation nats-server
NATS nats-server allows directory traversal via unintended path to a management action
CVE-2022-28357
Fix available
9.8 Critical
-
linuxfoundation nats-server, nats streaming server +1 more
Arbitrary file write in nats-server
CVE-2022-26652
Fix available
6.5 Medium
-
linuxfoundation nats-server, nats streaming server +1 more
Incorrect Authorization in NATS nats-server
CVE-2022-24450
Fix available
8.8 High
-
nats jwt library, linuxfoundation nats-server +1 more
nats-io/jwt not enforcing checking of Import token permissions
CVE-2021-3127
Fix available
7.5 High
-
linuxfoundation nats-server
Denial of Service (DoS)
CVE-2020-28466
Fix available
7.5 High
-
linuxfoundation nats-server, fedoraproject fedora +1 more
Incorrect handling of credential expiry by /nats-io/nats-server
CVE-2020-26892
Fix available
9.8 Critical
-
linuxfoundation nats-server, fedoraproject fedora +1 more
Nil dereference in NATS JWT, DoS of nats-server
CVE-2020-26521
Fix available
7.5 High
-
linuxfoundation nats-server
Integer Overflow or Wraparound in NATS Server
CVE-2019-13126
Fix available
7.5 High