Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges

The Apache Software Foundation has issued a critical security advisory for Apache Kvrocks, a NoSQL database compatible with Redis. Two vulnerabilities have been patched: CVE-2025-59790, a critical flaw allowing unauthorized users to gain administrative control via the RESET command, and CVE-2025-59792, an important flaw that exposes plaintext credentials through the MONITOR command. Both vulnerabilities affect versions 2.9.0 to 2.13.0, with the community releasing version 2.14.0 to address these issues.