CVE-2025-61673

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61673
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61673.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61673
Aliases
  • GHSA-vq25-vcrw-gj53
Published
2025-10-03T21:12:24.471Z
Modified
2026-03-14T12:45:35.204956Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L CVSS Calculator
Summary
Karapace is vulnerable to Authentication Bypass
Details

Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is skipped entirely, allowing an unauthenticated user to read and write to Schema Registry endpoints that should otherwise be protected. This effectively renders the OAuth authentication mechanism ineffective. This issue is fixed in version 5.0.2.

Database specific 
{
    "cwe_ids": [
        "CWE-288",
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61673.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/aiven-open/karapace

Affected ranges

Type
GIT
Repo
https://github.com/aiven-open/karapace
Events
Introduced
e1077d5db9e825ca6bd4402ab7613483dbdb9f37
Fixed
cee1bf6d68e71d9330610d5678e1b5be6540ab39

Affected versions

5.*
5.0.0
5.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61673.json"