Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-29785

33
FAUCET Score

CVE-2026-29785 describes a high-severity denial-of-service vulnerability affecting NATS-Server versions prior to 2.11.14 and 2.12.5. This flaw allows an unauthenticated attacker to crash the server by triggering a panic, provided the non-default "leafnode" configuration is enabled and compression (default for leafnodes) is active. Rated 7.5 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), it requires no privileges or user interaction and has a network attack vector, leading to a complete loss of availability. While it is on a "Hot List," there is currently no evidence of active exploitation in the wild (KEV: No), nor is public exploit code available. Community discussion is present, and the vulnerability is addressed in versions 2.11.14 and 2.12.5, with disabling leafnode compression serving as a workaround.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.11.14CPE matchmatch criteria
cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*
>= 2.12.0, < 2.12.5CPE matchmatch criteria
cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.66%
Probability of exploitation in next 30 days
EPSS Percentile
47.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0066 is in the 24th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: github.com/nats-io/nats-server/v2Fixed in: 2.11.14
gopatch availablevia ghsa
Product: github.com/nats-io/nats-server/v2Fixed in: 2.12.5
microsoftpatch availablevia msrc
Product: 21127-17084Fixed in: 1.31.0-18
microsoftpatch availablevia msrc
Product: azl3 telegraf 1.31.0-17 on Azure Linux 3.0Fixed in: 1.31.0-18

Vendor Advisories (2)

goGHSA-52jh-2xxh-pwh6high

NATS Server panic via malicious compression on leafnode port

Mar 24, 2026
microsoft2026-Mar/CVE-2026-29785Important

NATS Server panic via malicious compression on leafnode port

Mar 10, 2026

References

access.redhat.com / errata/RHSA-2026:21769
access.redhat.com / errata/RHSA-2026:22347
access.redhat.com / errata/RHSA-2026:23345
access.redhat.com / security/cve/CVE-2026-29785
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-29785.json
advisories.nats.io / CVE/secnote-2026-04.txt
MitigationVendor Advisory
github.com / nats-io/nats-server/commit/a1488de6f2ba6e666aef0f9cce0016f7f167d6a8
Patch
github.com / nats-io/nats-server/security/advisories/GHSA-52jh-2xxh-pwh6
MitigationVendor Advisory