PT-2025-18309 · Couchbase · Couchbase Server

Published 2025-04-30 · Updated 2025-06-25 · CVE-2025-46619

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 7.6.4 Couchbase Server version 7.2.7 and earlier for Windows

Description A security issue has been discovered that could allow unauthorized access to sensitive files, potentially granting access to files such as /etc/passwd or /etc/shadow, depending on the level of privileges.

Recommendations For Couchbase Server versions prior to 7.6.4, update to version 7.6.4 or later to resolve the issue. For Couchbase Server version 7.2.7 and earlier for Windows, update to version 7.2.7 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-46619

Affected Products

Couchbase Server

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-46619 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46619 · Vendor Advisory
• https://couchbase.com/alerts · Vendor Advisory
• https://forums.couchbase.com/tags/security · Vendor Advisory
• https://twitter.com/syedaquib77/status/1918177094875414553 · Twitter Post
• https://t.me/cvetracker/22746 · Telegram Post
• https://twitter.com/CVEnew/status/1917637667006681262 · Twitter Post
• https://twitter.com/dailycve/status/1922433969229832285 · Twitter Post
• https://docs.couchbase.com/server/current/release-notes/relnotes.html · Note
• https://twitter.com/Komodosec/status/1937692109383115024 · Twitter Post
• https://t.me/pentestingnews/60605 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1918117113732161690 · Twitter Post
• https://t.me/cvedetector/24140 · Telegram Post