CVE-2026-58213

HighCVSS 7.1/10Last modified Oct 25, 2026

Description

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupting the forwarded protocol stream and allowing injection of unintended NATS protocol operations. This issue is fixed in versions 2.14.1 and 2.12.9.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
nats-io	nats-server	< 2.12.9; >= 2.14.0-RC.1, < 2.14.1

References

https://github.com/nats-io/nats-server/commit/366837cfc65ab9ccb4f98193c65e8daf238582d8Patch
https://github.com/nats-io/nats-server/commit/64ebae40051ee497c481e10f316238faf0de1736Patch
https://github.com/nats-io/nats-server/commit/f14856b9e57a36818f43851cb69b6e33670885c9Patch
https://github.com/nats-io/nats-server/pull/8163Issue Tracking, Patch
https://github.com/nats-io/nats-server/pull/8164Issue Tracking, Patch
https://github.com/nats-io/nats-server/releases/tag/v2.12.9Release Notes
https://github.com/nats-io/nats-server/releases/tag/v2.14.1Release Notes
https://github.com/nats-io/nats-server/security/advisories/GHSA-qrcv-3558-gj4fVendor Advisory

Timeline

Published: Jul 8, 2026
Last modified: Oct 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-582144.3NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authentica CVE-2026-582165.3An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing CVE-2026-582185.3A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before be CVE-2026-582228.8A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD CVE-2026-582246.5A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol CVE-2026-582252.1SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconn CVE-2026-582268.7Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integer de CVE-2026-582277.5The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshak CVE-2026-582285.1Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute Java CVE-2026-582298.2Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host an CVE-2026-58236.3A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of t CVE-2026-582307.0SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a s