Not rated
CVE-2025-26413 Improper Input Validation vulnerability in Apache Kvrocks
Description
Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affects Apache Kvrocks: through 2.11.1. Users are recommended to upgrade to version 2.12.0, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Kvrocks 2.11 | earliest → 2.11.1 | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Kvrocks
The 9 CVEs of Apache Kvrocks →
CVE-2026-41566
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks
9.4
Critical
CVE-2026-45188
Relative Path Traversal vulnerability in Apache Kvrocks
2.4
Low
CVE-2026-46751
A vulnerability in Apache Kvrocks
5.5
Medium
CVE-2026-46752
Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks
10.0
Critical