CVE-2026-115322
Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 22, 2026
- Updated
- Oct 22, 2026
- Reserved
- Oct 22, 2026
Description
Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, database session details, and rollback SQL from other projects.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | VulnCheck |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
bytebasebytebase |
|
References
- https://github.com/bytebase/bytebase/issues/19369issue-tracking
- https://github.com/bytebase/bytebase/pull/19554patchissue-tracking
- https://github.com/bytebase/bytebase/commit/bb553e8423b38c826cd7b1da5c7117080cc8705dpatch
- 3.16.0 Release Notesrelease-notes
- https://github.com/bytebase/bytebase/blob/3.15.1/backend/api/v1/rollout_service.go#L505technical-description
- https://github.com/bytebase/bytebaseproduct
- VulnCheck Advisory: Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlersthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.