PT-2025-32542 · Yugabyte · Yugabytedb

CVE-2025-8862

Published

2025-08-11

Updated

2025-08-11

CVSS v4.0

7.0

High

Vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions: YugabyteDB (affected versions not specified)

Description: YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations.

Recommendations: Upgrade the database to a version where this information is properly redacted.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-8862

Yugabytedb