Nacos 2021 Authentication Bypass - Spoofed Nacos-Server User-Agent Header

Arnold Chan@slaz

•updated Sep 15, 2026•0•0•5

Detects attempts to bypass authentication on Nacos servers, including the use of spoofed Nacos-Server User-Agent headers, suspicious API query patterns missing required access tokens, and the subsequent use of forged JWT tokens signed with default keys.