CVE-2025-59792

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 28, 2025

CISA due date

—

The record

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Affected packages

Ecosystem	Package	Introduced	Fixed