GO-2026-4567
Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess
At a glance
- Published
- Updated
- CVE
- CVE-2026-27965
- Aliases
- GHSA-8g8j-r87h-p36x
Description
Vitess users with backup storage access can gain unauthorized access to production deployment environments in vitess.io/vitess
Affected packages
| Package | Versions |
|---|---|
| Go · vitess.io/vitess | introduced 0, fixed 0.22.4, introduced 0.23.0, fixed 0.23.3 |
References
- https://github.com/vitessio/vitess/security/advisories/GHSA-8g8j-r87h-p36x ADVISORY
- https://github.com/vitessio/vitess/commit/4c0173293907af9cb942a6683c465c3f1e9fdb5c WEB
- https://github.com/vitessio/vitess/issues/19459 WEB
- https://github.com/vitessio/vitess/pull/19460 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |