Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-59790 EUVD-2025-199878GHSA-24q7-5rc2-3hrp

Apache Kvrocks: RESET command grants admin privileges

Published Nov 28, 2025 · Updated Nov 28, 2025 · Assigned by apache

Description

Improper Privilege Management vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0.

Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kvrocks 2.9.0 – ≤ 2.13.0 —

References