{"id":"CVE-2026-85499","published":"2026-10-12T12:17:15.483","lastModified":"2026-10-16T18:19:15.847","description":"Improper Authorization vulnerability in Apache SkyWalking BanyanDB.\n\n\n\nThe Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests through the monitoring proxy.\n\n\n\nThis issue affects Apache SkyWalking BanyanDB: from 0.11.0 before 0.11.1.\n\n\n\nUsers are recommended to upgrade to version 0.11.1, which fixes the issue.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/qz1ogm6b37gfqq04y0lkdj8x1zr5cb4r","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/28/5","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An improper authorization flaw in Apache SkyWalking BanyanDB allows attackers to bypass read-only access controls through a monitoring proxy, enabling them to execute non-read operations despite having only readonly permissions. This vulnerability affects versions 0.11.0 before 0.11.1 and can lead to unauthorized data manipulation or exposure.","exploitability":"Exploitation requires a non-default configuration with a readonly user and a reachable monitoring target, making it moderately difficult but possible for attackers who can interact with the monitoring proxy.","blast_radius":"The vulnerability could allow attackers to perform unauthorized write operations on monitored systems, potentially leading to data corruption or unauthorized access to sensitive monitoring data across affected BanyanDB instances.","remediation":"Upgrade to version 0.11.1, which fixes the improper authorization issue in the monitoring proxy functionality.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["authorization","banyandb","monitoring"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:48:27.720Z"}}