Medium · 6.4 CVE-2026-54226 EUVD-2026-39331GHSA-8x67-x273-g37h

Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS

Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by apache

Description

A vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0.

Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Kvrocks	2.6.0 – ≤ 2.15.0	—