PT-2026-56561 · Unknown · Nats Server

Thesecguy45

·

CVE-2026-58213

·

Published

2026-07-08

·

Updated

2026-07-14

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.1 NATS Server versions prior to 2.12.9
Description An MQTT client can include protocol control characters in subscription filters. These characters are subsequently forwarded as NATS protocol data to route or leafnode connections, which corrupts the forwarded protocol stream and enables the injection of unintended NATS protocol operations.
Recommendations Update NATS Server to version 2.14.1 or later. Update NATS Server to version 2.12.9 or later.

Exploit

Fix

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74

Related Identifiers

BIT-NATS-2026-58213
CVE-2026-58213
GHSA-QRCV-3558-GJ4F
RHSA-2026:36016
RHSA-2026:36017

Affected Products

Nats Server