{"uuid": "40973d7d-87d2-4107-83b9-9f500ff7ec5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59790", "type": "seen", "source": "https://t.me/pphm_HackerNews/1161", "content": "Key-Value Engine Bug Turns Low-Level Access Into Full Control\n\nApache Kvrocks versions 2.9.0 to 2.13.0 contain a dangerous weakness in how the system handles theRESETcommand. A user with only basic privileges can trigger the command in a way that rewrites internal state and elevates themselves to administrator level, gaining unrestricted access to the entire data store.This vulnerability is tracked as CVE-2025-59790 and is considered high-impact due to how easily it can be abused.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.510256Z"}