Bytebase versions prior to 3.16.0 contain an authorization bypass flaw in the Rollout Service Task Run Handlers. The vulnerability is exposed through GetTaskRunLog, GetTaskRunSession, and PreviewTaskRunRollback endpoints. When accessed by an authenticated user, these handlers incorrectly validate ownership of the requested task or task run, allowing the caller to retrieve execution logs, database session details, and rollback SQL for tasks belonging to other projects.

Any deployment of Bytebase running a version older than 3.16.0 is affected. The vendor Bytebase provides the product Bytebase and the security advisory applies to all releases prior to 3.16.0, regardless of minor patch or build number.

The CVSS score of 5.3 indicates a moderate severity, and the EPSS score is unavailable. The vulnerability is not listed in CISA KEV and is not classified as a remote code execution flaw. Attackers only need legitimate credentials and permission on one project; they can then supply UIDs of tasks or task runs from other projects to gain access to sensitive execution logs and rollback statements. The impact is information disclosure across project boundaries, potentially aiding further attacks. Given the moderate CVSS score but the fact that any authenticated user can exploit it, administrators should treat this as a priority to patch.