CVE-2026-85499
Description
A flaw was found in Apache SkyWalking BanyanDB. In non-default configurations, the Canopy monitoring proxy fails to properly enforce role-based access restrictions. An authenticated user with read-only permissions can exploit this issue to send non-read requests through the monitoring proxy to reachable targets, allowing unauthorized modifications.
Statement
This vulnerability is rated as Low severity by Red Hat because exploitation requires a specific non-default deployment, valid low-privilege authentication, and network reachability to an active monitoring target. The affected Canopy role-based proxy feature is experimental proof-of-concept functionality and is not utilized across standard Red Hat product configurations. Furthermore, successful abuse is limited in blast radius to unauthorized relay of write requests without broader privilege escalation.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
