CVE-2025-46619: High severity couchbase server vulnerability
Published Apr 30, 2025
·Updated
A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.
Affected Software
5 affected components
Couchbase Couchbase Server<7.6.4
Couchbase Couchbase Server
All of the following
Any of the following
Couchbase Couchbase Server>=2.0.0<7.2.7
Couchbase Couchbase Server>=7.6.0<7.6.4
Microsoft Windows
Event History
Apr 30, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Aug 26, 57315
Event
via FIRST·10:00 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-46619?
CVE-2025-46619 has been rated as a significant vulnerability that can lead to unauthorized access to sensitive files.
2
How do I fix CVE-2025-46619?
To fix CVE-2025-46619, upgrade your Couchbase Server to version 7.6.4 or 7.2.7 for Windows.
3
What versions of Couchbase Server are affected by CVE-2025-46619?
CVE-2025-46619 affects Couchbase Server versions prior to 7.6.4.
4
What type of sensitive files can be accessed due to CVE-2025-46619?
CVE-2025-46619 may allow unauthorized access to critical files such as /etc/passwd or /etc/shadow.
5
Is there a patch available for CVE-2025-46619?
Yes, Couchbase addressed CVE-2025-46619 in versions 7.6.4 and 7.2.7 for Windows.