PT-2026-56563

CVE-2026-58250

Published

2026-07-08

Updated

2026-07-14

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.12.8 NATS Server versions prior to 2.11.17

Description An unauthenticated peer with network access to a leafnode listener with compression enabled can cause the server to crash. This occurs during the pre-authentication leafnode handshake when repeated leafnode INFO protocol messages are sent before the authentication and account setup processes are completed.

Recommendations Update NATS Server to version 2.12.8 or later. Update NATS Server to version 2.11.17 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Kodareef5

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers