CVE-2025-8862CWE-201

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations

High · published August 11, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L
EPSS
0.00341 · 26.3th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-08-11T12:40Z
EPSS history
Timeline
  • 11 AUG 12:40Z
    YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations
    cvelistv5