CVE-2025-61733

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue.

PUBLISHED Reserved 2025-09-30 | Published 2025-10-02 | Updated 2025-10-03 | Assigner apache

Problem types

CWE-288 Authentication Bypass Using an Alternate Path or Channel

Product status

Credits

liuhuajin <liuhuajin1@huawei.com> finder

References

lists.apache.org/thread/8wmcffly6gp50nmfw8j4w3hlmv843yo0 vendor-advisory

cve.org (CVE-2025-61733)

nvd.nist.gov (CVE-2025-61733)

Download JSON