Skip to content
OpenAdvisories
Low · 2.4 CVE-2026-45188 EUVD-2026-39334GHSA-mfqh-v96x-m264

Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling

Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Kvrocks

Description

Relative Path Traversal vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0.

Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kvrocks 1.0.0 – ≤ 2.15.0 —

References