CVE-2026-111613 alldatacenter CVE debrief

Who should care

Defenders responsible for AllData installations, especially those using version 0.7.1 or earlier, should assess their exposure and verify their network configurations to prevent unauthorized database connections.

Why it matters

CVE-2026-111613 is a high-severity vulnerability in AllData that allows unauthenticated JDBC injection, potentially leading to unauthorized database connections and file reads. Defenders should prioritize verifying exposure, especially for AllData version 0.7.1 or earlier, and assess network configurations to prevent exploitation.

• Potential unauthorized database connections
• Possible reading of arbitrary files from the host
• Need for authentication and authorization for database connections
• Importance of monitoring for suspicious database activity

Technical summary

The AllData application through version 0.7.1 contains an unauthenticated JDBC injection vulnerability. This vulnerability allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the /jobJdbcDatasource/test endpoint. An attacker can exploit this by providing a MySQL JDBC URL with allowLoadLocalInfile=true that points to an attacker-controlled server, potentially allowing the reading of arbitrary files from the host running the data-dts service.

Defensive priority

Defenders should prioritize verifying exposure of AllData installations, especially those using version 0.7.1 or earlier, and assess their network configurations to prevent unauthorized database connections.

Recommended defensive actions

• Verify AllData installations for exposure, especially those using version 0.7.1 or earlier
• Assess network configurations to prevent unauthorized database connections
• Implement authentication and authorization for database connections
• Monitor for suspicious database activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the unauthenticated JDBC injection vulnerability in AllData through 0.7.1. The vulnerability allows remote attackers to open arbitrary database connections. The source item includes references to technical descriptions and a third-party advisory.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.