PT-2026-52224 · Apache · Apache Kvrocks

Brubbish · Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-45188

Mitre

CVSS v4.0

2.4

Low

Base vector

AV:L/AC:H/AT:N/PR:H/UI:P/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:N/R:U/RE:L/U:Clear

Relative Path Traversal vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0.

Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-45188

Affected Products

Apache Kvrocks

References · 2

• https://lists.apache.org/thread/hxw1zxmpm12x6dltpyr9fpmnbz632jft · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45188 · Security Note