CVE-2026-13512

MEDIUM

Databend Tenant client_session_manager.rs state_key authorization

Title source: cna
STIX 2.1

Description

A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_manager.rs of the component Tenant Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-374520 | Databend Tenant client_session_manager.rs state_key authorization
https://vuldb.com/vuln/374520
Signature, Permissions Required signature permissions-required
VDB-374520 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/374520/cti
Third Party Advisory third-party-advisory
CVE-2026-13512 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-13512
Third Party Advisory third-party-advisory
Submit #838874 | Databend Labs Databend main branch commit 21377cd76bb1e84f92bfc9da1acc881b8841f1de; affected versions unknown CWE-639 Authorization Bypass Through User-Controlled Key
https://vuldb.com/submit/838874

Scores

CVSS v3 6.3
EPSS 0.0022
EPSS Percentile 12.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-285 CWE-639
Status published
Products (1)
None/Databend 1.2.881
Published Jun 28, 2026
Tracked Since Jun 29, 2026