Skip to content
OpenAdvisories

Vendor

kurrent-io

1 known vulnerabilities.

Products

KurrentDB 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-81190

    KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF

    KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database p…

    kurrent-io KurrentDB