CVE-2026-45188

LowCVSS 2.4

Published: 25/06/2026(UTC)Updated: 25/06/2026(UTC)Translated: 26/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile — higher than 4% of all known CVEs

Summary

A Relative Path Traversal vulnerability in Apache Kvrocks may allow attackers to access unauthorized system resources. The issue affects versions from 1.0.0 through 2.15.0.

Risk Assessment

Organizations using vulnerable versions may be exposed to unauthorized access to data and resources, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to version 2.16.0, which fixes the issue.

Original NVD description (English source)

Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.