StarRocks

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

StarRocks records in CISA KEV

No StarRocks vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-55484 CVE-2026-80346 · GHSA-97cx-wfjw-3m7v

StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views

MEDIUM 64

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00528 Published 2026-08-26 No fix listed CWE-862

TI-2026-56741 CVE-2026-82276 · GHSA-h495-787q-g6hm

StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate

MEDIUM 63

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword().

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00525 Published 2026-08-28 No fix listed CWE-306

TI-2026-56765 CVE-2026-82306 · GHSA-j4pf-x6cj-4mjq

StarRocks Query Detail Endpoint Returns Every User's Query History

LOW 30

StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00549 Published 2026-08-28 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0