CVE Feed

    Dashboard / CVE / CVE-2022-24450

    CVE-2022-24450

    NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

    Published:Feb 7, 2022
    Last Modified:Mar 30, 2026
    EPS:Feb 8, 2022
    EPSS Score:0.00529
    CVSS Score:8.8

    Affected Products

    Vendor
    Linuxfoundation
    Product
    Nats-server
    Vendor
    Nats
    Product
    Nats Streaming Server
    Vendor
    Redhat
    Product
    Acm

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-33249 (CVSS 4.3) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in ve…
    CVE-2026-33223 (CVSS 6.4) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33248 (CVSS 4.2) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33222 (CVSS 4.9) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33247 (CVSS 7.4) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33219 (CVSS 5.3) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33218 (CVSS 7.5) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33246 (CVSS 6.4) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-serve…
    CVE-2026-33217 (CVSS 7.1) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…
    CVE-2026-33216 (CVSS 8.6) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High