Linuxfoundation Vitess vulnerabilities

4 CVEs affecting Linuxfoundation Vitess, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-27969, published 2026-02-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-29195, published 2023-05-11. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing…
CVE-2023-29194, published 2023-04-14. Low severity, CVSS 2.7. EPSS: 0.8% chance of exploitation in the next 30 days. Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on,…
CVE-2026-27965, published 2026-02-26. Critical severity, CVSS 9.9. EPSS: 0.7% chance of exploitation in the next 30 days. Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can…
CVE-2026-27969, published 2026-02-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can…