Apache Software Foundation Kvrocks vulnerabilities

• apache software foundation kvrocks Apache Kvrocks: Improper permission for the APPLYBATCH command CVE-2026-41566 9.4 CriticalJune 25, 2026
• apache software foundation kvrocks Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling CVE-2026-45188 2.4 LowJune 25, 2026
• apache software foundation kvrocks Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, res… CVE-2026-46751 5.5 MediumJune 25, 2026
• apache software foundation kvrocks Apache Kvrocks: Stack buffer overflow in Lua bit.tohex() CVE-2026-46752 10.0 CriticalJune 25, 2026
• apache software foundation kvrocks Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS CVE-2026-54226 6.4 MediumJune 25, 2026
• apache kvrocks Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins CVE-2025-59792 5.3 MediumNovember 28, 2025
• apache kvrocks Apache Kvrocks: RESET command grants admin privileges CVE-2025-59790 5.4 MediumNovember 28, 2025
• apache kvrocks Apache Kvrocks: The server was crashed by the negative offset CVE-2025-26413 7.5 HighApril 22, 2025
• apache kvrocks Apache Kvrocks: Cross-Protocol Scripting Vulnerability CVE-2025-25069 6.5 MediumFebruary 7, 2025