# cve.now: Nats-io

The newest entries naming Nats-io as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-58208](https://cve.now/CVE-2026-58208.md): NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled (CVSS 6.8)
- [CVE-2026-58211](https://cve.now/CVE-2026-58211.md): NATS Server: \`no\_auth\_user\` pre-CONNECT fast path bypasses user connection restrictions (CVSS 5.4)
- [CVE-2026-58207](https://cve.now/CVE-2026-58207.md): NATS Server: Remote crash via integer overflow in Connz pagination (CVSS 7.7)
- [CVE-2026-58210](https://cve.now/CVE-2026-58210.md): NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory (CVSS 7.5)
- [CVE-2026-58209](https://cve.now/CVE-2026-58209.md): NATS Server: MQTT retained and QoS replay bypass subscribe deny filters (CVSS 4.3)
- [CVE-2026-58214](https://cve.now/CVE-2026-58214.md): NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217) (CVSS 4.3)
- [CVE-2026-58254](https://cve.now/CVE-2026-58254.md): NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check (CVSS 5.3)
- [CVE-2026-58213](https://cve.now/CVE-2026-58213.md): NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection (CVSS 7.1)
- [CVE-2026-58250](https://cve.now/CVE-2026-58250.md): NATS Server: Pre-auth server crash via double INFO in leafnode handshake (CVSS 7.5)
- [CVE-2026-58252](https://cve.now/CVE-2026-58252.md): NATS Server: Subscribe Authz Bypass via Wildcard-Overlap (CVSS 6.5)
- [CVE-2026-58253](https://cve.now/CVE-2026-58253.md): NATS Server: Route API Auth Bypass (CVSS 8.8)
- [CVE-2026-58251](https://cve.now/CVE-2026-58251.md): NATS Server: Queue Subscribe Authz Bypass (CVSS 6.5)
- [CVE-2026-33249](https://cve.now/CVE-2026-33249.md): NATS: Message tracing can be redirected to arbitrary subject (CVSS 4.3)
- [CVE-2026-33223](https://cve.now/CVE-2026-33223.md): NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing (CVSS 6.4)
- [CVE-2026-33248](https://cve.now/CVE-2026-33248.md): NATS has mTLS verify\_and\_map authentication bypass via incorrect Subject DN matching (CVSS 4.2)
- [CVE-2026-33222](https://cve.now/CVE-2026-33222.md): NATS JetStream has an authorization bypass through its Management API (CVSS 4.9)
- [CVE-2026-33247](https://cve.now/CVE-2026-33247.md): NATS credentials are exposed in monitoring port via command-line argv (CVSS 7.4)
- [CVE-2026-33219](https://cve.now/CVE-2026-33219.md): NATS is vulnerable to pre-auth DoS through WebSockets client service (CVSS 5.3)
- [CVE-2026-33218](https://cve.now/CVE-2026-33218.md): NATS has pre-auth server panic via leafnode handling (CVSS 7.5)
- [CVE-2026-33246](https://cve.now/CVE-2026-33246.md): NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers (CVSS 6.4)
- [CVE-2026-33217](https://cve.now/CVE-2026-33217.md): NATS allows MQTT clients to bypass ACL checks (CVSS 7.1)
- [CVE-2026-33216](https://cve.now/CVE-2026-33216.md): NATS has MQTT plaintext password disclosure (CVSS 8.6)
- [CVE-2026-29785](https://cve.now/CVE-2026-29785.md): NATS Server panic via malicious compression on leafnode port (CVSS 7.5)
- [CVE-2026-27889](https://cve.now/CVE-2026-27889.md): NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead (CVSS 7.5)
- [CVE-2026-33215](https://cve.now/CVE-2026-33215.md): NATS is vulnerable to MQTT hijacking via Client ID (CVSS 6.5)
- [CVE-2026-27571](https://cve.now/CVE-2026-27571.md): nats-server websockets are vulnerable to pre-auth memory DoS (CVSS 5.9)
- [CVE-2025-30215](https://cve.now/CVE-2025-30215.md): NATS-Server Fails to Authorize Certain Jetstream Admin APIs (CVSS 9.6)
- [CVE-2023-46129](https://cve.now/CVE-2023-46129.md): xkeys Seal encryption used fixed key for all encryption (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nats-io
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.