What’s Vulnerable › Products
nats-io nats-server vulnerabilities
37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your nats-io nats-server version is affected
Latest nats-io nats-server vulnerabilities
- CVE-2026-58211 — NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions (CVSS 5.4)
- CVE-2026-58208 — NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled (CVSS 7.5)
- CVE-2026-58207 — NATS Server: Remote crash via integer overflow in Connz pagination (CVSS 6.5)
- CVE-2026-58254 — NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check (CVSS 6.5)
- CVE-2026-58253 — NATS Server: Route API Auth Bypass (CVSS 8.8)
- CVE-2026-58252 — NATS Server: Subscribe Authz Bypass via Wildcard-Overlap (CVSS 6.5)
- CVE-2026-58251 — NATS Server: Queue Subscribe Authz Bypass (CVSS 6.5)
- CVE-2026-58250 — NATS Server: Pre-auth server crash via double INFO in leafnode handshake (CVSS 7.5)
- CVE-2026-58214 — NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217) (CVSS 4.3)
- CVE-2026-58213 — NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection (CVSS 7.1)
- CVE-2026-58210 — NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory (CVSS 7.5)
- CVE-2026-58209 — NATS Server: MQTT retained and QoS replay bypass subscribe deny filters (CVSS 4.3)
- CVE-2026-33249 — NATS: Message tracing can be redirected to arbitrary subject (CVSS 4.3)
- CVE-2026-33248 — NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching (CVSS 4.2)
- CVE-2026-33223 — NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing (CVSS 5.4)
- CVE-2026-33222 — NATS JetStream has an authorization bypass through its Management API (CVSS 4.9)
- CVE-2026-33247 — NATS credentials are exposed in monitoring port via command-line argv (CVSS 5.3)
- CVE-2026-33246 — NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers (CVSS 5.4)
- CVE-2026-33219 — NATS is vulnerable to pre-auth DoS through WebSockets client service (CVSS 5.3)
- CVE-2026-33218 — NATS has pre-auth server panic via leafnode handling (CVSS 7.5)
- CVE-2026-33217 — NATS allows MQTT clients to bypass ACL checks (CVSS 6.5)
- CVE-2026-33216 — NATS has MQTT plaintext password disclosure (CVSS 7.5)
- CVE-2026-29785 — NATS Server panic via malicious compression on leafnode port (CVSS 7.5)
- CVE-2026-27889 — NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead (CVSS 7.5)
- CVE-2026-33215 — NATS is vulnerable to MQTT hijacking via Client ID (CVSS 6.5)