Missing Authorization Vulnerability in RisingWave

RisingWave versions prior to 3.1.0 are affected by a missing authorization vulnerability, tracked as CVE-2026-112262. The flaw resides in the handling of filesystem-based data sources and sinks, specifically posix_fs sources and fs sinks. An attacker possessing the CREATE privilege on a schema can manipulate the posix_fs.root or fs.path parameters to point to arbitrary directories on the underlying host filesystem. By exploiting this, a low-privileged SQL user can bypass intended access controls to read sensitive files, such as credentials and private keys, or perform arbitrary write operations. Given that the RisingWave service may operate with elevated privileges, this vulnerability enables the execution of unauthorized filesystem modifications, potentially resulting in full system compromise.

Impact

Successful exploitation allows low-privileged SQL users to gain unauthorized access to any file accessible by the RisingWave process. In configurations where the service runs with root privileges, this results in immediate system-level compromise. The vulnerability is particularly dangerous for multi-tenant environments or instances where untrusted users are granted schema creation rights, as it allows for credential exfiltration and unauthorized file manipulation.

Recommendation

1. Upgrade RisingWave to version 3.1.0 or later immediately to remediate CVE-2026-112262.
2. Audit database user permissions to restrict CREATE privileges on schemas to trusted users only.
3. Enforce strict filesystem-level permissions for the service account running RisingWave to limit the impact of potential arbitrary file read or write operations.