Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: StarRocks Clear all filters
TI-2026-56765 CVE-2026-82306 · GHSA-j4pf-x6cj-4mjq

StarRocks Query Detail Endpoint Returns Every User's Query History

Priority LOW 30

StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00549 Published 2026-08-28 No fix listed CWE-200
TI-2026-56741 CVE-2026-82276 · GHSA-h495-787q-g6hm

StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate

Priority MEDIUM 63

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword().

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00525 Published 2026-08-28 No fix listed CWE-306