CVE-2026-81190

In KurrentDB version 26.1.0 , a user with authorization to read the $all stream can exploit Secondary Indexing query capabilities to perform arbitrary file reads (accessible to the database process), enumerate directories , and conduct HTTP GET requests (SSRF). This vulnerability is typically res...