{"uuid": "1e5af257-37e0-48ce-8c52-48a533e57614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59790", "type": "seen", "source": "https://t.me/pphm_HackerNews/1161", "content": "Key-Value Engine Bug Turns Low-Level Access Into Full Control\n\nApache Kvrocks versions 2.9.0 to 2.13.0 contain a dangerous weakness in how the system handles theRESETcommand. A user with only basic privileges can trigger the command in a way that rewrites internal state and elevates themselves to administrator level, gaining unrestricted access to the entire data store.This vulnerability is tracked as CVE-2025-59790 and is considered high-impact due to how easily it can be abused.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.652711Z"}