CVE-2025-59792NVD

Vulnerability Summary

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks.

This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0.

Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Severity Level

MEDIUM(5.3)

Published Date

Nov 28, 2025

Last Modified

Nov 28, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

CWE-312: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityLow

IntegrityNone

AvailabilityNone

External References

https://lists.apache.org/thread/h2pcvr5p9otc7dnj2dt2nr4b3omghddw

Critical Alert 1 Active Exploit Detected Today

CVE Watchtower

CVE-2025-59792NVD

Vulnerability Summary

External References