CVE-2026-41566 PUBLISHED

Apache Kvrocks: Improper permission for the APPLYBATCH command

Assigner: apache
Reserved: 21.04.2026 Published: 25.06.2026 Updated: 25.06.2026

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: 2.8.0.

Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/R:I/RE:M/U:Amber
CVSS Score: 9.4

Product Status

Vendor Apache Software Foundation
Product Apache Kvrocks
Versions Default: unaffected
  • affected from 2.8.0 to 2.15.0 (incl.)

Credits

  • Qing Xu reporter

References

Problem Types

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges CWE