PT-2026-56563 · Unknown · Nats Server

Kodareef5

·

CVE-2026-58250

·

Published

2026-07-08

·

Updated

2026-07-14

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.12.8 NATS Server versions prior to 2.11.17
Description An unauthenticated peer with network access to a leafnode listener with compression enabled can cause the server to crash. This occurs during the pre-authentication leafnode handshake when repeated leafnode INFO protocol messages are sent before the authentication and account setup processes are completed.
Recommendations Update NATS Server to version 2.12.8 or later. Update NATS Server to version 2.11.17 or later.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

AZL-92250
BIT-NATS-2026-58250
CVE-2026-58250
GHSA-3G5Q-CFH2-CQ67

Affected Products

Nats Server