Skip to content
OpenAdvisories

Vendor

risingwavelabs

1 known vulnerabilities.

Products

risingwave 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-112262

    RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors

    RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posix_fs sources and fs sinks. Attackers holding schema CREATE privilege can set posix_fs.root or …

    risingwavelabs risingwave