CVE-2025-61734

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61734
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61734.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61734
Aliases
Published
2025-10-02T09:47:15.317Z
Modified
2026-07-08T07:15:43.185398030Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Apache Kylin: improper restriction of file read
Details

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "last_affected": "5.0.2"
                }
            ]
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "fixed": "5.0.2"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61734.json",
    "cna_assigner": "apache",
    "cwe_ids": [
        "CWE-552"
    ]
}
References

Affected packages

Git / github.com/apache/kylin

Affected ranges

Type
GIT
Repo
https://github.com/apache/kylin
Events
Introduced
aa6d582c0a96fdf31e85791f86850cfc00a7644f
Fixed
196016ffa4b70a68439be72d75584d2f99ed23b1
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "5.0.3"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61734.json"