CVE-2026-107755

Apache CouchDB versions 3.5.2 and below on all platforms are vulnerable to credential disclosure due to insufficient filtering in the _replicator database . An authenticated user can exploit this flaw to read replication credentials belonging to other users' replications, rather than being restri...