PT-2026-56581 · Unknown · Nats Server

CVE-2026-58207

·

Published

2026-07-08

·

Updated

2026-07-09

CVSS v3.1

7.7

High

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.3 NATS Server versions prior to 2.12.12
Description A client capable of sending account-scoped connection monitoring requests can cause the server to crash. This occurs when the client provides Offset and Limit values for Connz pagination that cause an internal arithmetic overflow before the response window is safely bounded.
Recommendations Update NATS Server to version 2.14.3 or later. Update NATS Server to version 2.12.12 or later.

Exploit

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-190

Related Identifiers

AZL-92241
CVE-2026-58207
GHSA-Q59R-VQ66-PXC2

Affected Products

Nats Server