High severityNVD Advisory· Published Oct 2, 2025· Updated Feb 26, 2026
Apache Kylin: Authentication bypass
CVE-2025-61733
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.kylin:kylinMaven | >= 4.0.0, < 5.0.3 | 5.0.3 |
org.apache.kylin:kylin-core-commonMaven | >= 4.0.0, < 5.0.3 | 5.0.3 |
Affected products
3- ghsa-coords2 versions
>= 4.0.0, < 5.0.3+ 1 more
- (no CPE)range: >= 4.0.0, < 5.0.3
- (no CPE)range: >= 4.0.0, < 5.0.3
- Apache Software Foundation/Apache Kylinv5Range: 4.0.0
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-mr9j-4j48-xcm2ghsaADVISORY
- lists.apache.org/thread/8wmcffly6gp50nmfw8j4w3hlmv843yo0ghsavendor-advisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-61733ghsaADVISORY
- www.openwall.com/lists/oss-security/2025/09/30/7ghsaWEB
- github.com/apache/kylin/commit/8b2cb8c71bd9885d70dad4f1a9822e38d9949b8cghsaWEB
- github.com/apache/kylin/pull/2336ghsaWEB
- issues.apache.org/jira/browse/KYLIN-6081ghsaWEB
News mentions
0No linked articles in our index yet.