Skip to content
Threat Feed
Subscribe

Vendor

NATS

4 briefs RSS
high threat

NATS Server Authorization Bypass Vulnerability (CVE-2026-58252)

CVE-2026-58252 identifies an authorization bypass vulnerability in NATS Server, described as a 'Subscribe Authz Bypass via Wildcard-Overlap', which allows unauthorized access or actions by exploiting how wildcard subscriptions are handled.

exploited NATS Server authorization-bypass cve nats server vulnerability mqtt information-disclosure filter-bypass +1
2t 1c
high advisory

NATS Server MQTT Password Disclosure Vulnerability

The NATS server exposes MQTT passwords in plaintext via monitoring endpoints due to incorrect classification as JWTs, affecting versions before v2.12.6 or v2.11.15.

NATS server nats mqtt credential-access vulnerability
3r 1t
high advisory

NATS Server Panic via Malicious Compression on Leafnode Port

A vulnerability exists in NATS servers configured to accept leafnode connections where a malicious remote NATS server can trigger a server panic by exploiting compression negotiation on the leafnode port.

NATS server nats denial-of-service compression
2r 2t 1i
high advisory

NATS Server Pre-Authentication Denial-of-Service via Leafnode Handling

A pre-authentication denial-of-service vulnerability exists in NATS servers before versions v2.12.6 and v2.11.15, allowing a remote client connected to the leafnode port to crash the server by sending a malformed message.

NATS Server nats denial-of-service leafnode
2r 1t