kurrent-io vulnerabilities

Products

• KurrentDB 1

Latest kurrent-io CVEs

Newest publication first

1. CVE-2026-81190 KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF

   Published 2026-11-05

   Medium·CVSS 6.9 EPSS 0.27%

   KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files accessible to the database process, enumerate dir...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.