Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-59792 EUVD-2025-199872GHSA-h932-5cw5-54j3

Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins

Published Nov 28, 2025 · Updated Nov 28, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Kvrocks

Description

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0.

Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kvrocks 1.0.0 – ≤ 2.13.0 —

References