CVE-2026-29785
Fixed in a distro release EPSS <1%CVSS 7.5
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.14 and 2.12.5, if the nats-server has the "leafnode" configuration enabled (not default), then anyone who can connect can crash the nats-server by triggering a panic. This happens pre-authentication and requires that compression be enabled (which it is, by default, when leafnodes are used). Versions 2.11.14 and 2.12.5 contain a fix. As a workaround, disable compression on the leafnode port.
Products: nats-io nats-server, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat multicluster global hub 1.5.3, Red Hat OpenShift Container Platform 4
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/nats-io/nats-server | no fix |
| Go | github.com/nats-io/nats-server/v2 | 2.11.14 |
| Go | github.com/nats-io/nats-server/v2 | 2.12.5 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | k3s | 1.35.2.1-r3 |
| Chainguard | k3s-1.32 | 1.32.13.1-r5 |
| Chainguard | k3s-1.33 | 1.33.9.1-r5 |
| Chainguard | k3s-static | 1.35.2.1-r3 |
| Chainguard | k3s-static-1.32 | 1.32.13.1-r5 |
| Chainguard | k3s-static-1.33 | 1.33.9.1-r5 |
| Chainguard | kine | 0.14.15-r0 |
| Chainguard | kine | 0.14.14-r2 |
| Chainguard | milvus-2.5 | 2.5.27-r4 |
| Chainguard | nats | 0.3.2-r0 |
| Chainguard | nats-fips | 0.3.2-r0 |
| Chainguard | nats-top | 0.6.3-r17 |
| Chainguard | nats-top-fips | 0.6.3-r15 |
| Chainguard | prometheus-nats-exporter | 0.19.1-r3 |
| Chainguard | prometheus-nats-exporter-fips | 0.19.1-r3 |
| Chainguard | rke2-runtime-1.31 | no fix |
| Chainguard | rke2-runtime-1.32 | no fix |
| Chainguard | rke2-runtime-1.33 | 1.33.9.2.1-r2 |
| Chainguard | rke2-runtime-1.34 | 1.34.5.2.1-r2 |
| Chainguard | rke2-runtime-1.35 | 1.35.2.2.1-r2 |
| Chainguard | rke2-runtime-fips-1.31 | no fix |
| Chainguard | rke2-runtime-fips-1.32 | no fix |
| Chainguard | rke2-runtime-fips-1.33 | 1.33.9.2.1-r2 |
| Chainguard | rke2-runtime-fips-1.34 | 1.34.6.2.1-r1 |
| Chainguard | rke2-runtime-fips-1.35 | 1.35.2.2.1-r1 |
| Chainguard | telegraf-1.35 | no fix |
| Chainguard | telegraf-1.36 | no fix |
| Chainguard | telegraf-1.37 | 1.37.3-r5 |
| Debian 12 | nats-server | no fix |
| Debian 13 | nats-server | no fix |
| Debian 14 | nats-server | 2.12.6-1 |
| Ubuntu 24.04 LTS | nats-server | no fix |
| Ubuntu 25.10 | nats-server | no fix |
| Ubuntu 26.10 | nats-server | no fix |
| Ubuntu Pro 26.04 LTS | nats-server | no fix |
| Wolfi | k3s | 1.35.2.1-r3 |
| Wolfi | k3s-1.32 | 1.32.13.1-r5 |
| Wolfi | k3s-1.33 | 1.33.9.1-r5 |
| Wolfi | k3s-static | 1.35.2.1-r3 |
| Wolfi | k3s-static-1.32 | 1.32.13.1-r5 |
| Wolfi | k3s-static-1.33 | 1.33.9.1-r5 |
| Wolfi | kine | 0.14.15-r0 |
| Wolfi | kine | 0.14.14-r2 |
| Wolfi | nats | 0.3.2-r0 |
| Wolfi | nats-top | 0.6.3-r17 |
| Wolfi | prometheus-nats-exporter | 0.19.1-r3 |
| Wolfi | telegraf-1.36 | no fix |
| Wolfi | telegraf-1.37 | 1.37.3-r5 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20260326T203309-150000.1.155.2 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |