CVE-2026-82276
StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.
| CWE | CWE-306 |
| Vendor | starrocks |
| Product | starrocks |
| Published | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for starrocks starrocks
Be the first to know when new medium vulnerabilities affecting starrocks starrocks are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
StarRocks / starrocks
0 ≤ 4.0.13
References
github.com: https://github.com/StarRocks/starrocks/issues/75747 github.com: https://github.com/StarRocks/starrocks github.com: https://github.com/StarRocks/starrocks/blob/4.0.13/fe/fe-core/src/main/java/com/starrocks/http/rest/RestBaseAction.java github.com: https://github.com/StarRocks/starrocks/blob/4.0.13/fe/fe-core/src/main/java/com/starrocks/http/rest/ShowMetaInfoAction.java vulncheck.com: https://www.vulncheck.com/advisories/starrocks-frontend-rest-handlers-bypass-the-base-class-authentication-gate
Credits
🔍 George Chen