CVE-2025-61734

published 2025-10-02

CVE-2025-61734: Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	kylin	>= 4.0.0 < 5.0.3	5.0.3
apache_software_foundation	apache_kylin	4.0.0 – 5.0.2	—

CWE-552