CVE-2026-63664

Name of the Vulnerable Software and Affected Versions CloudBeaver versions prior to 26.1.2

Description An authenticated non-administrative user with access to a shared database connection can bypass the global data export restriction. This allows the user to initiate server-side data exports even if an administrator has disabled this feature, potentially disclosing database contents that the user is authorized to query but not to export. This issue does not provide additional database read privileges.

Recommendations Update to version 26.1.2.