CVE-2026-115322
Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers
bytebase bytebase
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.28%Chance of exploitation activity in the next 30 days, higher than 19% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 3.16.0bytebaseCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, database session details, and rollback SQL from other projects.
Text from CVE List
Affected versions 2
- bytebaseaffected: all versions before 3.16.0CVE List
- bytebaseunaffected: 3.16.0CVE List
References 7
- github.com/bytebase/bytebase/pull/19554Fixvia CVE List
- github.com/bytebase/bytebase/commit/bb553e8423b38c826cd7b1da5c7117080cc8705dFixvia CVE List
- github.com/bytebase/bytebase/releases/tag/3.16.0Fixvia CVE List
- vulncheck.com/advisories/bytebase-before-3.16.0-authorization-bypass-via-rollout-service-task-run-handlersAdvisoryvia CVE List
- github.com/bytebase/bytebase/issues/19369Referencevia CVE List
- github.com/bytebase/bytebase/blob/3.15.1/backend/api/v1/rollout_service.go#L505Referencevia CVE List
- github.com/bytebase/bytebaseReferencevia CVE List