CVE-2026-82306
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other users, including statements containing credentials.
Risk Assessment
An attacker could access sensitive data, including credentials, potentially leading to confidentiality breach and further attacks.
Recommendation
Update StarRocks to a version that restricts access to query history. Limit user privileges and monitor access to the query_detail endpoint.
Other vulnerabilities in StarRocks
See all- CVE-2026-82276Medium
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.
- CVE-2026-80346High
StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. The lack of authorization in the drop process allows any authenticated account to drop a view belonging to any database.
Original NVD description (English source)
StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other users, including statements containing credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS