AIKIDO-2026-572127
nanomq.nanomq is vulnerable to Denial of Service (DoS)
20
Low Risk
This Affects:
nanomq.nanomqTL;DR
NanoMQ's MQTT codec decodes UNSUBSCRIBE packets without validating the result of the internal read_uint16() call that counts topics. When a malformed packet supplies insufficient data, the topic counter stays at zero while the buffer offset never advances, so the decode loop never terminates. A malicious MQTT broker can send a crafted UNSUBSCRIBE packet to a connecting NanoMQ client and drive it into unbounded CPU use and memory allocation. The fix adds a status and bounds check so the decoder advances or aborts instead of looping forever.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your NanoMQ instance connects as an MQTT client to an untrusted broker.
Background info
nanomq.nanomq is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 0.24.13.
How to fix this
Upgrade the nanomq.nanomq and/or nanomq.NanoNNG library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant