Improper Authorization in Apache SkyWalking BanyanDB
CVE-2026-85499

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Skywalking Banyandb
Vendor: CVE Published:; 12 October 2026

What is CVE-2026-85499?

An improper authorization vulnerability in Apache SkyWalking BanyanDB allows a readonly user to execute non-read operations via a monitoring proxy under specific configurations. This issue can lead to unauthorized access and manipulation of data. It is essential for users to upgrade to version 0.11.1 to mitigate the risks associated with this vulnerability.

Affected Version(s)

Apache SkyWalking BanyanDB 0.11.0 < 0.11.1

References

https://lists.apache.org/thread.html/qz1ogm6b37gfqq04y0lk...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 12, 2026
Vulnerability Reserved
Sep 4, 2026

Credit

@CyberLeo (Independent Security Researcher)

CVE-2026-85499 Data

JSON