CVE-2026-85499

An Improper Authorization vulnerability exists in Apache SkyWalking BanyanDB (versions 0.11.0 before 0.11.1 ). The issue is located in the Canopy component, where the system fails to enforce readonly-role restrictions on the /monitoring/* proxy. Under a non-default configuration, a user with a re...