{"id":"CVE-2025-61734","title":"Files or Directories Accessible to External Parties vulnerability in Apache Kylin.\n You are fine as long as the Kylin's system and project admin access is well protected.\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.2.\n\nUsers…","summary":"Files or Directories Accessible to External Parties vulnerability in Apache Kylin.\n You are fine as long as the Kylin's system and project admin access is well protected.\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.2.\n\nUsers…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-552"],"vendor":"apache","product":"kylin","affected":["kylin >= 4.0.0, < 5.0.3"],"patched":["kylin 5.0.3"],"published":"2025-10-02","updated":"2026-10-12","sourceUpdated":"2026-10-12T15:10:00.207","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-61734","references":[{"url":"https://lists.apache.org/thread/z705g7sn3g0bkchlqbo1hz1tyqorn4d2","label":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/8","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.19775,"epssPercentile":0.97354,"ingestedAt":"2026-10-12T15:55:08.075Z","slug":"CVE-2025-61734","body":"## Overview\n\nFiles or Directories Accessible to External Parties vulnerability in Apache Kylin.\n You are fine as long as the Kylin's system and project admin access is well protected.\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.2.\n\nUsers are recommended to upgrade to version 5.0.3, which fixes the issue.\n\n## Affected\n\n- `kylin >= 4.0.0, < 5.0.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `kylin 5.0.3`","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":41.3,"likelihood":4,"exploitation":0,"ransomware":0},"changes":[]}