CVE-2025-61733: Apache Kylin: Authentication bypass

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-02 · updated 2026-10-12
Weakness: CWE-288

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue.

Affected products

Apache Software Foundation Apache Kylin: from 4.0.0 before 5.0.3 — fixed in 5.0.3

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache Kylin 5.0.3. Check the vendor advisory for mitigations.

References

https://lists.apache.org/thread/8wmcffly6gp50nmfw8j4w3hlmv843yo0
http://www.openwall.com/lists/oss-security/2025/09/30/7

Get alerted when CVE-2025-61733 or the next vulnerability affects your stack