VULNERABILITY INTELLIGENCE

CVE-2026-33215

CVSS score6.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-03-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

Description

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides an MQTT client interface. Prior to versions 2.11.15 and 2.12.5, Sessions and Messages can by hijacked via MQTT Client ID malfeasance. Versions 2.11.15 and 2.12.5 patch the issue. No known workarounds are available.

Weakness classification

  • security-advisories@github.com: CWE-287

Primary references