NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.
RHSA-2026:36016
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nats-server2-14-main@aarch64, nats-server2-14-main@src, nats-server2-14-main@x86_64
Fixes 6 records
Priority MEDIUM 40
TI-2026-41922 CVE-2026-58213
NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
Priority LOW 32
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.
TI-2026-41954 CVE-2026-58254
NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check
Priority LOW 24
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.
TI-2026-41921 CVE-2026-58211
NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions
Priority LOW 24
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.
TI-2026-41923 CVE-2026-58214
NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)
Priority LOW 20
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.
Priority LOW 20
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system.