Data Race Vulnerability in NanoMQ MQTT Broker by NanoMQ
CVE-2025-59946

7.5HIGH

Key Information:

Vendor

NanoMQ

Status
NanoMQ
Vendor
CVE Published:
27 December 2025

What is CVE-2025-59946?

The NanoMQ MQTT Broker, an Edge Messaging Platform, is susceptible to a classical data racing issue affecting the sub info list. This vulnerability can lead to a heap use after free crash, causing instability and potential denial of service. Users are advised to upgrade to version 0.24.2 or later, where this issue has been addressed and patched.

Affected Version(s)

nanomq < 0.24.4

References

https://github.com/nanomq/nanomq/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/nanomq/nanomq/issues/1863
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-59946 : Data Race Vulnerability in NanoMQ MQTT Broker by NanoMQ