You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@kylin.apache.org by Li Yang <li...@apache.org> on 2025/09/30 15:28:38 UTC

CVE-2025-61733: Apache Kylin: Authentication bypass

Severity: high 

Affected versions:

- Apache Kylin 4.0.0 through 5.0.2

Description:

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

This issue is being tracked as KYLIN-6081 

Credit:

liuhuajin <li...@huawei.com> (finder)

References:

https://kylin.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-61733
https://issues.apache.org/jira/browse/KYLIN-6081