Cloudanix VulnDB

CVE-2025-61734

High · 7.5

Apache Kylin Files or Directories Accessible to External Parties

CVSS

7.5

EPSS

20.7%

Published

Oct 2, 2025

CISA due date

—

The record

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue.

Affected packages

Ecosystem Package Introduced Fixed
Maven org.apache.kylin:kylin 4.0.0 5.0.3
Maven org.apache.kylin:kylin-common-server 4.0.0 5.0.3
Maven org.apache.kylin:kylin-common-service 4.0.0 5.0.3
Maven org.apache.kylin:kylin-core-common 4.0.0 5.0.3
Maven org.apache.kylin:kylin-core-metadata 4.0.0 5.0.3
Maven org.apache.kylin:kylin-ops-server 4.0.0 5.0.3
Maven org.apache.kylin:kylin-server 4.0.0 5.0.3
maven org.apache.kylin/kylin 4.0.0 5.0.3
maven org.apache.kylin/kylin-common-server 4.0.0 5.0.3
maven org.apache.kylin/kylin-common-service 4.0.0 5.0.3
maven org.apache.kylin/kylin-core-common 4.0.0 5.0.3
maven org.apache.kylin/kylin-core-metadata 4.0.0 5.0.3
maven org.apache.kylin/kylin-ops-server 4.0.0 5.0.3
maven org.apache.kylin/kylin-server 4.0.0 5.0.3

Related vulnerabilities