PT-2025-48339 · Apache · Apache Kvrocks

Published 2025-11-28 · Updated 2025-12-04 · CVE-2025-59790

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Kvrocks versions 2.9.0 through 2.13.0

Description An improper privilege management issue exists in Apache Kvrocks. Upgrade to version 2.14.0 to resolve the issue.

Recommendations Upgrade to version 2.14.0.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-59790

Affected Products

Apache Kvrocks

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-59790 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59790 · Vendor Advisory
• https://lists.apache.org/thread/dlbz5hmm4ts3npzqnvhofxmqg9w9zt0o · Vendor Advisory
• http://openwall.com/lists/oss-security/2025/11/28/2 · Note
• https://twitter.com/oss_security/status/1996688403287409094 · Twitter Post
• https://twitter.com/CVEnew/status/1994419151796892143 · Twitter Post
• https://t.me/cveNotify/144243 · Telegram Post
• https://t.me/CVEtracker/38442 · Telegram Post