CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql)

• CWE-306

• https://github.com/advisories/GHSA-36hp-jr8h-556fExploit, Third Party Advisory
• https://github.com/alibaba/nacos/issues/4463Exploit, Third Party Advisory
• https://github.com/alibaba/nacos/pull/4517Patch, Third Party Advisory
• https://github.com/advisories/GHSA-36hp-jr8h-556fExploit, Third Party Advisory
• https://github.com/alibaba/nacos/issues/4463Exploit, Third Party Advisory
• https://github.com/alibaba/nacos/pull/4517Patch, Third Party Advisory

Published

Apr 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29436Anuko Time Tracker is an open source, web-based time trackin…8.1
• CVE-2021-29437ScratchOAuth2 is an Oauth implementation for Scratch. Any Sc…6.8
• CVE-2021-29438The Nextcloud dialogs library (npm package @nextcloud/dialog…5.4
• CVE-2021-29439The Grav admin plugin prior to version 1.10.11 does not corr…7.2
• CVE-2021-29440Grav is a file based Web-platform. Twig processing of static…7.2
• CVE-2021-29441Nacos is a platform designed for dynamic service discovery a…9.8
• CVE-2021-29443jose is an npm library providing a number of cryptographic o…5.9
• CVE-2021-29444jose-browser-runtime is an npm package which provides a numb…5.9
• CVE-2021-29445jose-node-esm-runtime is an npm package which provides a num…5.9
• CVE-2021-29446jose-node-cjs-runtime is an npm package which provides a num…5.9
• CVE-2021-29447Wordpress is an open source CMS. A user with the ability to …6.5
• CVE-2021-29448Pi-hole is a Linux network-level advertisement and Internet …8.8