RisingWave (< 3.1.0)

RisingWave versions before 3.1.0 contain a missing authorization vulnerability allowing low-privileged SQL users to perform arbitrary filesystem read and write operations.