CVE-2021-29441: Nacos <1.4.1 - Authentication Bypass

HoneyLabs honeypots recorded 3 probes matching CVE-2021-29441 from 2 distinct source IP addresses in the last 7 days. Severity is rated critical.

What the sensors show

Probes arrived on 2 of the 7 days in this window. The busiest day was 2026-11-02, with 2. One address, 66.92.21.200, sent 67% of them. The largest source network was AS40676 (Psychz Networks), with 67% of the probes from 1 address. Over the last 90 days the sensors recorded 133 probes for it.

Request paths that identify it

  • /nacos/v1/cs/configs

Addresses probing it

Source IPProbesNetworkCountry
66.92.21.2002Psychz NetworksUnited States
161.33.30.2331Oracle CorporationJapan

Networks it comes from

ASNOrganisationProbesSource IPs
AS40676Psychz Networks21
AS31898Oracle Corporation11

Where it comes from

CountryProbes
United States2
Japan1

Captured requests

  • /nacos/v1/cs/configs?dataId=nacos.cfg.dataIdfoo&group=foo&content=helloWorld
  • /nacos/v1/cs/configs

HTTP client fingerprints

  • b11cuk051_00040016_6289c865_xed80
  • b11cun050_00040017_38043d51

CVE report

Open a specific CVE from the CVE tracker.