CVE-2025-8862 — YugabyteDB Inc / YugabyteDB

CVE-2025-8862

YugabyteDB Inc / YugabyteDB PUBLISHED

Description (CNA)

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted.

Affected (CNA)

Vendor / product	Versions
YugabyteDB Inc / YugabyteDB	affected 2024.1.0 before 2024.1.3; affected 2.20.0.0 before 2.20.7.0; affected 2.23.0.0 before 2.23.1.0

CWE

CWE-201

References

https://docs.yugabyte.com/preview/secure/vulnerability-disclosure-policy/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.