CVE-2026-13512

Received Received - Intake

Authorization Bypass in Databend HTTP Tenant Handler

Publication date: 2026-06-28

Last updated on: 2026-06-28

Assigner: VulDB

Description

A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_manager.rs of the component Tenant Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-28

Last Modified

2026-06-28

Generated

2026-06-29

AI Q&A

2026-06-29

EPSS Evaluated

N/A

NVD

CVE-2026-13512

EUVD

EUVD-2026-40009

Affected Vendors & Products

Vendor	Product	Version / Range
databend	databend	to 1.2.881 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Databend up to version 1.2.881, specifically in the HTTP component related to the Tenant Handler. It affects the function ClientSessionManager::state_key in the source file client_session_manager.rs. The issue allows an attacker to bypass authorization controls by manipulating this function.

The attack can be initiated remotely, and an exploit is publicly available. A fix has been proposed but is not yet accepted.

Impact Analysis

This vulnerability can lead to an authorization bypass, meaning an attacker could gain unauthorized access to resources or actions that should be restricted.

Since the attack can be performed remotely and an exploit is publicly available, it increases the risk of unauthorized access or control over the affected system.

Hi! I’m here to help you understand CVE-2026-13512. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70