CVE-2022-26652 - Vulnerability Details - OpenCVE

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linuxfoundation	Nats-server
Nats	Nats Streaming Server

Configuration 1 [-]

OR	cpe:2.3:a:linuxfoundation:nats-server::::::::
	cpe:2.3:a:nats:nats_streaming_server::::::::

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2022/03/10/1
https://advisories.nats.io/CVE/CVE-2022-26652.txt
https://github.com/nats-io/nats-server/releases
https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68

History

Mon, 30 Mar 2026 14:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linuxfoundation Linuxfoundation nats-server
CPEs	cpe:2.3:a:nats:nats_server::::::::	cpe:2.3:a:linuxfoundation:nats-server::::::::
Vendors & Products	Nats nats Server	Linuxfoundation Linuxfoundation nats-server

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-03-10T03:48:44.000Z

Updated: 2024-08-03T05:11:44.439Z

Reserved: 2022-03-07T00:00:00.000Z

Link: CVE-2022-26652

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-03-10T17:47:51.470

Modified: 2026-03-30T14:30:00.877

Link: CVE-2022-26652

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-03-10T12:06:14.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/nats-io/nats-server/releases"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt"}, {"name": "[oss-security] 20220309 CVE-2022-26652: nats-server arbitrary file write", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-26652", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/nats-io/nats-server/releases", "refsource": "MISC", "url": "https://github.com/nats-io/nats-server/releases"}, {"name": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68", "refsource": "CONFIRM", "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68"}, {"name": "https://advisories.nats.io/CVE/CVE-2022-26652.txt", "refsource": "CONFIRM", "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt"}, {"name": "[oss-security] 20220309 CVE-2022-26652: nats-server arbitrary file write", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T05:11:44.439Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/nats-io/nats-server/releases"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt"}, {"name": "[oss-security] 20220309 CVE-2022-26652: nats-server arbitrary file write", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-26652", "datePublished": "2022-03-10T03:48:44.000Z", "dateReserved": "2022-03-07T00:00:00.000Z", "dateUpdated": "2024-08-03T05:11:44.439Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*", "matchCriteriaId": "680B03EF-8C73-4140-A578-8B5F35FA57AE", "versionEndExcluding": "2.7.4", "versionStartIncluding": "2.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:nats:nats_streaming_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "36672B5B-9C1F-45D5-91CA-DD6F8F63363C", "versionEndExcluding": "0.24.3", "versionStartIncluding": "0.15.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected."}, {"lang": "es", "value": "NATS nats-server versiones anteriores a 2.7.4, permite un Salto de Directorio (con acceso de escritura) por medio de un elemento en un archivo ZIP para flujos JetStream. nats-streaming-server versiones anteriores a 0.24.3 tambi\u00e9n est\u00e1 afectado"}], "id": "CVE-2022-26652", "lastModified": "2026-03-30T14:30:00.877", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-03-10T17:47:51.470", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt"}, {"source": "cve@mitre.org", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/nats-io/nats-server/releases"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2022/03/10/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://advisories.nats.io/CVE/CVE-2022-26652.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/nats-io/nats-server/releases"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}