CVE-2025-11060 in OpenShift Service Mesh
Summary
by MITRE • 09/26/2025
A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or guest users to observe unauthorized records within the same table, bypassing access controls, via crafted LIVE SELECT subscriptions when other users alter or delete records.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 09/26/2025
This vulnerability resides in the live query subscription mechanism of a database engine, representing a critical access control flaw that undermines data integrity and confidentiality. The issue manifests when record or guest users can observe unauthorized records within the same table through carefully crafted LIVE SELECT subscriptions, effectively bypassing established access control mechanisms. The vulnerability exploits the inherent design of live query subscriptions to maintain real-time data synchronization, creating an unintended pathway for unauthorized data observation.
The technical implementation of this flaw leverages the database engine's subscription system where users can establish persistent connections to monitor specific data changes. When other legitimate users modify or delete records within the same table, the live subscription mechanism inadvertently propagates these changes to unauthorized observers. This occurs because the subscription system fails to properly validate user permissions at the point of data change propagation, creating a race condition between data modification operations and access control enforcement. The vulnerability specifically targets the synchronization logic that handles real-time updates, where the system does not adequately verify that subscribed users possess appropriate permissions to view the modified records.
The operational impact of this vulnerability extends beyond simple data exposure, as it creates persistent monitoring capabilities for unauthorized users who should not have access to certain records. Attackers could potentially establish multiple subscriptions to monitor sensitive data modifications across different tables, effectively creating a comprehensive surveillance mechanism without proper authorization. This flaw particularly affects environments where database engines support real-time data streaming or change data capture features, as these mechanisms often lack proper access control validation during data propagation. The vulnerability's severity is amplified when combined with other access control weaknesses, potentially enabling data exfiltration or insider threat exploitation scenarios.
Mitigation strategies should focus on strengthening access control validation within the live query subscription mechanism, ensuring that all data propagation events are properly authenticated and authorized. Database administrators should implement mandatory access controls that validate user permissions at every data change event, preventing unauthorized users from observing record modifications. The system should enforce strict separation between subscription establishment and data propagation, with permission checks occurring at both stages. Additionally, implementing proper audit logging of subscription activities and data access patterns can help detect unauthorized monitoring attempts. This vulnerability aligns with CWE-284 Access Control Issues and maps to ATT&CK technique T1074 Data Staged, as it enables unauthorized data observation and potential exfiltration through legitimate database access channels. Organizations should also consider implementing network-level monitoring to detect unusual subscription patterns and data access behaviors that may indicate exploitation attempts.