PT-2026-21766 · Nats · Nats Server

Pavel Kohout · Publicado 2026-01-01 · Atualizado 2026-03-03 · CVE-2026-27571

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.2 NATS-Server versions prior to 2.12.3

Description NATS-Server, a high-performance messaging system, has an issue in its WebSocket implementation. The server handles compressed messages via WebSocket negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation only bounded the size of a NATS message but did not independently bound the memory consumption during message construction. This allows an attacker to use a compression bomb, causing excessive memory consumption and potentially terminating the server process. The issue does not require valid NATS credentials to exploit, as compression negotiation occurs before authentication.

Recommendations Update NATS-Server to version 2.11.2 or later. Update NATS-Server to version 2.12.3 or later.

Exploit

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

CWE-409

Identificadores relacionados

AZL-78372

AZL-78374

BIT-NATS-2026-27571

CVE-2026-27571

GHSA-QRVQ-68C2-7GRW

GO-2026-4533

SUSE-SU-2026:0757-1

Produtos afetados

Nats Server

Referências · 132

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27571.json · Exploit
• https://github.com/nats-io/nats-server · Nota
• https://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017 · Correção
• https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw · Aviso do Fabricante
• https://github.com/nats-io/nats-server/releases/tag/v2.11.12 · Nota
• https://github.com/nats-io/nats-server/releases/tag/v2.12.3 · Nota
• https://twitter.com/VulmonFeeds/status/2026394479154934168 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-27611 · Nota
• https://suse.com/security/cve/CVE-2017-18873 · Nota
• https://suse.com/security/cve/CVE-2026-26190 · Nota
• https://suse.com/security/cve/CVE-2026-25804 · Nota
• https://suse.com/security/cve/CVE-2026-24895 · Nota
• https://suse.com/security/cve/CVE-2026-26957 · Nota
• https://suse.com/security/cve/CVE-2026-26314 · Nota
• https://suse.com/security/cve/CVE-2017-18912 · Nota