Search

Find a vulnerability

Search criteria

    2 vulnerabilities by kurrent-io

    CVE-2026-81190 (GCVE-0-2026-81190)

    Vulnerability from nvd – Published: 2026-11-05 20:52 – Updated: 2026-11-05 20:52
    VLAI
    Title
    KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF
    Summary
    KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database process, enumerate directories, and issue HTTP GET requests from that process. The default configuration limits this privilege to administrators. The flaw does not permit file writes and does not expose environment variables. This issue is fixed in version 26.1.1.
    Severity
    6.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    CWE
    • CWE-73 - External Control of File Name or Path
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    GitHub_M CNA under the mitre root
    CNA scorecard C 72/100 over 8026 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kurrent-io KurrentDB Affected: = 26.1.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "KurrentDB",
          "vendor": "kurrent-io",
          "versions": [
            {
              "status": "affected",
              "version": "= 26.1.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database process, enumerate directories, and issue HTTP GET requests from that process. The default configuration limits this privilege to administrators. The flaw does not permit file writes and does not expose environment variables. This issue is fixed in version 26.1.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-05T20:52:19.064Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/kurrent-io/KurrentDB/security/advisories/GHSA-r8vq-5875-cq97",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/security/advisories/GHSA-r8vq-5875-cq97"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/pull/5674",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/pull/5674"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/commit/18706d0d5fcec5e2fbb0d20f76638d113b5842c8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/commit/18706d0d5fcec5e2fbb0d20f76638d113b5842c8"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/releases/tag/v26.1.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/releases/tag/v26.1.1"
        },
        {
          "name": "https://kurrentdb.kurrent.io/releases/kurrentdb-26-1-1-security-release",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kurrentdb.kurrent.io/releases/kurrentdb-26-1-1-security-release"
        }
      ],
      "source": {
        "advisory": "GHSA-r8vq-5875-cq97",
        "discovery": "UNKNOWN"
      },
      "title": "KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-81190",
    "datePublished": "2026-11-05T20:52:19.064Z",
    "dateReserved": "2026-08-26T16:26:08.968Z",
    "dateUpdated": "2026-11-05T20:52:19.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-81190 (GCVE-0-2026-81190)

    Vulnerability from cvelistv5 – Published: 2026-11-05 20:52 – Updated: 2026-11-05 20:52
    VLAI
    Title
    KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF
    Summary
    KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database process, enumerate directories, and issue HTTP GET requests from that process. The default configuration limits this privilege to administrators. The flaw does not permit file writes and does not expose environment variables. This issue is fixed in version 26.1.1.
    Severity
    6.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    CWE
    • CWE-73 - External Control of File Name or Path
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    GitHub_M CNA under the mitre root
    CNA scorecard C 72/100 over 8026 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    kurrent-io KurrentDB Affected: = 26.1.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "KurrentDB",
          "vendor": "kurrent-io",
          "versions": [
            {
              "status": "affected",
              "version": "= 26.1.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database process, enumerate directories, and issue HTTP GET requests from that process. The default configuration limits this privilege to administrators. The flaw does not permit file writes and does not expose environment variables. This issue is fixed in version 26.1.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-05T20:52:19.064Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/kurrent-io/KurrentDB/security/advisories/GHSA-r8vq-5875-cq97",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/security/advisories/GHSA-r8vq-5875-cq97"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/pull/5674",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/pull/5674"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/commit/18706d0d5fcec5e2fbb0d20f76638d113b5842c8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/commit/18706d0d5fcec5e2fbb0d20f76638d113b5842c8"
        },
        {
          "name": "https://github.com/kurrent-io/KurrentDB/releases/tag/v26.1.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kurrent-io/KurrentDB/releases/tag/v26.1.1"
        },
        {
          "name": "https://kurrentdb.kurrent.io/releases/kurrentdb-26-1-1-security-release",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kurrentdb.kurrent.io/releases/kurrentdb-26-1-1-security-release"
        }
      ],
      "source": {
        "advisory": "GHSA-r8vq-5875-cq97",
        "discovery": "UNKNOWN"
      },
      "title": "KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-81190",
    "datePublished": "2026-11-05T20:52:19.064Z",
    "dateReserved": "2026-08-26T16:26:08.968Z",
    "dateUpdated": "2026-11-05T20:52:19.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}