CVE-2025-59792 | Apache Kvrocks up to 2.13.0 MONITOR Command missing encryption

November 28, 2025 Yanac

A vulnerability was found in Apache Kvrocks up to 2.13.0. It has been declared as problematic. Affected by this issue is some unknown functionality of the component MONITOR Command Handler. Such manipulation leads to missing encryption of sensitive data.

This vulnerability is uniquely identified as CVE-2025-59792. The attack can only be initiated within the local network. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More