CVE-2023-0575

9.8 criticalEPSS 0.8%

Critical (9.8) in yugabyte yugabytedb. EPSS 0.8% chance of exploitation in the next 30 days.

External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.0.0

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-94, CWE-642
Published: 2023-02-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

yugabyte:yugabytedb

References

https://www.yugabyte.com/
https://www.yugabyte.com/

Check your stack JSON