// CVE · PUBLISHED 2026-06-25
CVE-2026-41566 Apache Software Foundation / Apache Kvrocks
9.4 · CVSS 4.0 Critical
Description Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks.
This issue affects Apache Kvrocks: 2.8.0.
Users are recommended to upgrade to version 2.16.0, which fixes the issue.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Apache Software Foundation / Apache Kvrocks Published 25 Jun 2026 Modified 25 Oct 2026 CVSS 9.4 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:I/V:X/RE:M/U:Amber Score source security@apache.org CWE CWE-280 Record status Deferred