Verified

CVE-2026-85499: Apache SkyWalking BanyanDB 0.11.0 to before 0.11.1

Affected technology

Apache SkyWalking BanyanDB · 0.11.0 to before 0.11.1
Apache Software Foundation

Component: Not specified by the source

What an attacker can do

The source says under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests through the monitoring proxy.

Published 12-Oct-2026 14:05 UTC

CWE: CWE-863
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-12 14:08:19.738788+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-12 14:05:47.443915+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-85499.html