Apache SkyWalking BanyanDB contains an authorization oversight in its Canopy component; the /monitoring/* proxy endpoint does not enforce read‑only role restrictions. A user assigned to a read‑only role can therefore issue write‑type commands to a monitoring target that the user can reach, allowing the attacker to modify monitoring data or change configuration settings. This flaw could disrupt data integrity and expose operational details.

The vulnerability is present in Apache SkyWalking BanyanDB releases from version 0.11.0 up to, but excluding, 0.11.1. It affects any deployment that utilizes the Canopy component with a read‑only user configured to access a monitoring target reachable by that user. Versions prior to 0.11.0 or upgrades to 0.11.1 and later are not affected.

As an improper authorization flaw, the risk is high if monitoring targets are exposed to attackers. The CVSS score is 9.1, indicating severe impact, while the EPSS score is < 1%, indicating a low yet non‑zero likelihood of exploitation. The issue is not listed in CISA’s KEV catalog, suggesting limited widespread exploitation to date. However, the attack can be performed over the network when the monitoring proxy is reachable; the attacker only needs authenticated read‑only credentials and network access to the target, making the exploit probable in misconfigured environments.