Apache Kvrocks vulnerabilities

3 known vulnerabilities in Apache Kvrocks from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Apache Kvrocks: Heap-based Buffer Overflow

  CVE-2026-46752Jun 25, 2026Apache

  Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.0.4 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.

• 9.4 Critical severity

  Apache Kvrocks: Improper Handling of Insufficient Permissions or Privileges

  CVE-2026-41566Jun 25, 2026Apache

  Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: 2.8.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.

• 7.5 High severity

  Improper Input Validation vulnerability in Apache Kvrocks.

  CVE-2025-26413Apr 22, 2025Apache

  Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affec