All vulnerabilities
CVE-2026-85499

Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy

Apache Software Foundation Apache SkyWalking BanyanDB
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 17% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0.11.1Fixed versionCVE List
Published12 Oct 2026Updated 16 Oct 2026CVE List

What fixes it

  • 0.11.1Apache SkyWalking BanyanDBCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper Authorization vulnerability in Apache SkyWalking BanyanDB.

The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests through the monitoring proxy.

This issue affects Apache SkyWalking BanyanDB: from 0.11.0 before 0.11.1.

Users are recommended to upgrade to version 0.11.1, which fixes the issue.

Text from CVE List

Affected versions 1

  • Apache SkyWalking BanyanDBaffected: 0.11.0 before 0.11.1CVE List

References 1