WID-SEC-2026-4560 — NATS Server: Mehrere Schwachstellen

Summary

Ein Angreifer kann mehrere Schwachstellen in NATS Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Dateien zu manipulieren.

Product

Der NATS-Server ist ein Server für NATS.io, das Cloud- und Edge-native Messaging-System.

Revision history

2026-11-12 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-27c4-m7hq-v6pw vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-27c4-m7hq-v6pw
GitHub Security Advisory GHSA-2wxw-wgx7-4ffx vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-2wxw-wgx7-4ffx
GitHub Security Advisory GHSA-42wr-c22f-4h5c vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-42wr-c22f-4h5c
GitHub Security Advisory GHSA-4fpp-8grw-j976 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-4fpp-8grw-j976
GitHub Security Advisory GHSA-5qvj-hvwx-q9qf vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-5qvj-hvwx-q9qf
GitHub Security Advisory GHSA-5v9x-4f9q-q7qj vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-5v9x-4f9q-q7qj
GitHub Security Advisory GHSA-5xw9-67vx-qppr vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-5xw9-67vx-qppr
GitHub Security Advisory GHSA-65q4-982r-rm5c vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-65q4-982r-rm5c
GitHub Security Advisory GHSA-724w-jvcm-4c58 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-724w-jvcm-4c58
GitHub Security Advisory GHSA-72gq-694q-fj66 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-72gq-694q-fj66
GitHub Security Advisory GHSA-7mrx-vpq7-fhmp vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-7mrx-vpq7-fhmp
GitHub Security Advisory GHSA-8fcg-2fq8-c8qc vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-8fcg-2fq8-c8qc
GitHub Security Advisory GHSA-8xmc-886f-g496 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-8xmc-886f-g496
GitHub Security Advisory GHSA-9qgw-9q78-p7xv vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-9qgw-9q78-p7xv
GitHub Security Advisory GHSA-c5hj-fqj4-pj32 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-c5hj-fqj4-pj32
GitHub Security Advisory GHSA-fwrx-9r9q-h7p4 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-fwrx-9r9q-h7p4
GitHub Security Advisory GHSA-g9p6-654w-mr9v vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-g9p6-654w-mr9v
GitHub Security Advisory GHSA-gc58-jp35-x246 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-gc58-jp35-x246
GitHub Security Advisory GHSA-h9r4-8j36-3c2f vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-h9r4-8j36-3c2f
GitHub Security Advisory GHSA-hm5m-vqj5-vf2q vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-hm5m-vqj5-vf2q
GitHub Security Advisory GHSA-hwrp-2926-g93m vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-hwrp-2926-g93m
GitHub Security Advisory GHSA-m996-6cph-cjhc vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-m996-6cph-cjhc
GitHub Security Advisory GHSA-mf72-w5mg-h2mg vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-mf72-w5mg-h2mg
GitHub Security Advisory GHSA-p29q-ccgc-hcg7 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-p29q-ccgc-hcg7
GitHub Security Advisory GHSA-p8x9-xrv7-3g8j vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-p8x9-xrv7-3g8j
GitHub Security Advisory GHSA-q57r-qh7g-9wgm vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-q57r-qh7g-9wgm
GitHub Security Advisory GHSA-r9gv-x84w-62mr vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-r9gv-x84w-62mr
GitHub Security Advisory GHSA-rr37-7hx9-8xw5 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-rr37-7hx9-8xw5
GitHub Security Advisory GHSA-vqv6-8g5v-c9c4 vom 2026-11-12
https://github.com/nats-io/nats-server/security/advisories/GHSA-vqv6-8g5v-c9c4