[Question] Is DBeaver opening ports in LISTEN mode? What for?

Just installed latest (6.2.4) version, but never checked before so might be something appening before as well. DBeaver opens LISTENING ports in IPv6, open to the world

tcp6       0      0 :::35073                :::*                    LISTEN      8562/java           
tcp6       0      0 127.0.0.1:38214         :::*                    LISTEN      8562/java           
tcp6       0      0 :::26541                :::*                    LISTEN      8562/java           

What are those for? Can’t they be opened on localhost only? Might it be PG debugger module maybe? If so, and whatever the answer, how do i prevent those world-listening ports to open?

[ctrlaltca]

I just started using DBeaver, nice piece of software. I can confirm that it opens 2 different TCP ports on my pc: 31592 and 46731. The startup log confirms that port 46731 is used by the RMI server; no info about the other port. I find it quite irresponsible for a software to open a tcp port to the whole world just to implement IPC. A small bug in the RMI server could lead to remote code execution while DBeaver is running.

[serge-rider]

I think it is RMI server. You can see it in startup log:

Starting RMI server at XXXX

It is used for intercommunication between dbeaver processes (e.g. when you start second dbeaver process to open sql file it connects to the running GUI and processing the call thru it). I don’t think that we can just disable it.

Does it do any harm? Perhaps we should limit IP address binding with 127.0.0.1 (I believe we already do this) or something like this. Any other ideas?