Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | nats | 0, 2.12.0 |
Timeline
- Mar 24, 2026 CVE Published
- Mar 25, 2026 Security Advisory
- Mar 26, 2026 PoC Published
- Mar 27, 2026 CVE Updated
NATS JetStream has an authorization bypass through its Management API
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | nats | 0, 2.12.0 |