RisingWave Missing Authorization Allows File Access

Executive Summary

RisingWave before version 3.1.0 has a missing authorization flaw. Low-privileged SQL users with schema CREATE privilege can exploit posix_fs sources and fs sinks to read or write arbitrary server files. Attackers can set posix_fs.root or fs.path to any directory, allowing them to access sensitive files like credentials or write files as root.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if RisingWave versions before 3.1.0 are running. Inspect RisingWave logs for suspicious source or sink creation commands involving posix_fs or fs connectors. Look for unauthorized file read/write operations in system logs. Verify if the configuration flag unsafe_enable_local_fs_connector is enabled in production environments.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to read sensitive files such as credentials and keys, or write arbitrary files on the server. This could lead to data breaches, unauthorized access, or system compromise if exploited.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. It may result in data breaches, unauthorized disclosures, and failure to protect personal or health information.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade RisingWave to version 3.1.0 or later to address the missing authorization vulnerability. Restrict schema CREATE privileges to trusted users only. Review and audit existing posix_fs sources and fs sinks configurations for unauthorized access.

Useful 0 Not Useful 0