CVE-2026-82306: StarRocks Query Detail Endpoint Returns Every User's Query History
StarRocks through 4.0.13 contains an information disclosure vulnerability in the querydetail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other users, including statements containing credentials.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated StarRocks user with low privileges can request the query_detail endpoint. No user interaction is required.
What information could be exposed?
The endpoint can return unfiltered history for queries run by other users, including full SQL text, execution plans, and profiling data. SQL statements may contain credentials.
Are deployments affected by default?
The provided data identifies StarRocks through version 4.0.13 as affected, but does not state whether the query_detail endpoint is enabled or exposed in a default configuration.
How can I determine whether sensitive data may already have been exposed?
Review access to the query_detail endpoint by authenticated low-privilege accounts and assess whether returned results include other users' query records. Pay particular attention to query text that may contain credentials.