CVE-2026-107755

Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

CVSS

No CVSS.

References

Link	Resource
https://lists.apache.org/thread.html/pj83174r8f8f64odf47fwhozbfjtot0f
https://lists.apache.org/thread/ro57p4r2lhxn2n4712ppx7r11oqq900n
http://www.openwall.com/lists/oss-security/2026/10/20/16

Configurations

No configuration.

History

20 Oct 2026, 19:17

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2026/10/20/16 -

20 Oct 2026, 17:17

Type	Values Removed	Values Added
CWE		CWE-200

20 Oct 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-20 16:16

Updated : 2026-10-20 19:34

NVD link : CVE-2026-107755

Mitre link : CVE-2026-107755

CVE.ORG link : CVE-2026-107755

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2026-107755", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-107755", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-20T16:53:32.926065Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@apache.org", "cvssData": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "USER", "baseScore": 6.0, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache CouchDB", "versions": [{"status": "affected", "version": "0", "lessThan": "3.5.3", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-20T16:16:59.610", "references": [{"url": "https://lists.apache.org/thread.html/pj83174r8f8f64odf47fwhozbfjtot0f", "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread/ro57p4r2lhxn2n4712ppx7r11oqq900n", "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2026/10/20/16", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users\u2019 replications, not just their own.\n\nUsers are recommended to upgrade to version 3.5.3, which fixes this issue."}], "lastModified": "2026-10-20T19:34:00.700", "sourceIdentifier": "security@apache.org"}