Yugabytedb Inc

6 CVEs across 2 Yugabytedb Inc products. Browse Yugabytedb Inc vulnerabilities, severities, and proof-of-concept exploits.

Yugabytedb Inc products with known CVEs

ProductCVEs
Yugabytedb3
Yugabytedb Anywhere3
Yugabytedb Inc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19662026-02-05YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration v…
CVE-2025-88662025-08-11YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit th…
CVE-2025-88652025-08-11The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. A…
CVE-2025-88642025-08-11Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logs
CVE-2025-88632025-08-11YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission
CVE-2025-88622025-08-11YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommen…