We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-8862



Description

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted.

Reserved 2025-08-11 | Published 2025-08-11 | Updated 2025-08-11 | Assigner Yugabyte


HIGH: 7.0CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L

Problem types

CWE-201 Insertion of Sensitive Information Into Sent Data

Product status

Default status
unaffected

2024.1.0 before 2024.1.3
affected

2.20.0.0 before 2.20.7.0
affected

2.23.0.0 before 2.23.1.0
affected

References

docs.yugabyte.com/...secure/vulnerability-disclosure-policy/

cve.org (CVE-2025-8862)

nvd.nist.gov (CVE-2025-8862)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-8862

Support options

Helpdesk Chat, Email, Knowledgebase