CVE-2026-82276
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.
Risk Assessment
An unauthenticated attacker could obtain sensitive infrastructure information, potentially facilitating further attacks and compromising system security.
Recommendation
Update StarRocks to a version that fixes the authentication bypass. Restrict access to the frontend HTTP port and monitor unauthorized requests.
Other vulnerabilities in StarRocks
See all- CVE-2026-82306Medium
StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other users, including statements containing credentials.
- CVE-2026-80346High
StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. The lack of authorization in the drop process allows any authenticated account to drop a view belonging to any database.
Original NVD description (English source)
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS