PT-2026-1008 · Nanomq+1 · Nanomq+1

Published 2026-01-01 · Updated 2026-02-18 · CVE-2025-66023

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.5

Description NanoMQ MQTT Broker, an Edge Messaging Platform, contains a Heap-Use-After-Free (UAF) issue in its MQTT bridge client component, which is implemented using the NanoNNG library. This issue occurs when NanoMQ connects to a remote MQTT broker. A malicious remote broker can trigger a crash (Denial of Service) or potential memory corruption by sending a malformed packet sequence immediately after connection establishment. The vulnerability is addressed by enforcing stricter protocol adherence in the MQTT client SDK, ensuring that a CONNACK packet is always the first packet processed upon connection.

Recommendations Update to version 0.24.5 or later. As a workaround, validate the remote broker before bridging.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2025-66023

GHSA-24F7-Q5HH-27HF

Affected Products

Nanomq

Nanonng

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66023.json · Exploit
• https://github.com/nanomq/nanomq/security/advisories/GHSA-24f7-q5hh-27hf · Vendor Advisory
• https://github.com/nanomq/NanoNNG/pull/1365 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-66023 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66023 · Vendor Advisory
• https://github.com/nanomq/nanomq/issues/2145 · Note
• https://t.me/cveNotify/147437 · Telegram Post
• https://twitter.com/CVEnew/status/2006861508290953624 · Twitter Post
• https://t.me/CVEtracker/41175 · Telegram Post
• https://twitter.com/transilienceai/status/2007293762586759201 · Twitter Post
• https://t.me/cveNotify/152362 · Telegram Post