oss-sec mailing list archives

CVE-2026-41566: Apache Kvrocks: Improper permission for the APPLYBATCH command

From: Hulk Lin <hulk () apache org>
Date: Thu, 25 Jun 2026 02:19:05 +0000

Severity: 

Affected versions:

- Apache Kvrocks 2.8.0 through 2.15.0

Description:

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: 2.8.0.

Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Credit:

Qing Xu (reporter)

References:

https://kvrocks.apache.org
https://www.cve.org/CVERecord?id=CVE-2026-41566

Current thread:

CVE-2026-41566: Apache Kvrocks: Improper permission for the APPLYBATCH command Hulk Lin (Jun 24)