Vulnerability GO-2026-6356
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 month ago
September 15, 2026 at 06:39 PM UTC
Missing authorization on vttablet /debug/vrlog in vitess.io/vitess
<0.23.6, >=0.24.0-rc1 <0.24.3
<0.23.6, >=0.24.0-rc1 <0.24.3
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Vitess vttablet /twopcz reflected XSS in vitess.io/vitess
<0.23.5, >=0.24.0 <0.24.2 GO-2026-6798
<0.23.5, >=0.24.0 <0.24.2 GO-2026-6798
Critical
21 days ago
Vitess vttablet /twopcz reflected XSS
<0.23.5, >=0.24.0 <0.24.2 GHSA-v75v-6fpf-gvw8
<0.23.5, >=0.24.0 <0.24.2 GHSA-v75v-6fpf-gvw8
Medium Risk
2 months ago
Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
>=0.24.0-rc1 <=0.24.2, <=0.23.6 GHSA-mhc4-g3wh-cw7m
>=0.24.0-rc1 <=0.24.2, <=0.23.6 GHSA-mhc4-g3wh-cw7m
Unknown
8 months ago
Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess
<0.22.4, >=0.23.0 <0.23.3 GO-2026-4567
<0.22.4, >=0.23.0 <0.23.3 GO-2026-4567
Unknown
8 months ago
Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess
<0.22.4, >=0.23.0-rc1 <0.23.3 GO-2026-4570
<0.22.4, >=0.23.0-rc1 <0.23.3 GO-2026-4570
Impacted packages
Timeline
Published
1 month ago
September 15, 2026 at 06:39 PM UTC
Fixed (v0.23.6)
2 months ago
September 03, 2026 at 01:46 PM UTC
Fixed (v0.24.3)
2 months ago
September 03, 2026 at 02:40 PM UTC
Last Modified
1 month ago
September 15, 2026 at 07:00 PM UTC