CVE-2026-85499

UNKNOWN 0.0

Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests through the monitoring proxy. This issue affects Apache SkyWalking BanyanDB: from 0.11.0 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.

CWE	CWE-863
Vendor	apache software foundation
Product	apache skywalking banyandb
Published	Oct 12, 2026
Last Updated	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache skywalking banyandb

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache skywalking banyandb are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache SkyWalking BanyanDB

0.11.0 < 0.11.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/qz1ogm6b37gfqq04y0lkdj8x1zr5cb4r openwall.com: http://www.openwall.com/lists/oss-security/2026/09/28/5

Credits

🔍 @CyberLeo (Independent Security Researcher)