Junglewise Threat Intelligence

CVE-2025-61734: Apache Kylin Files or Directories Accessible to External Parties

CVE-2025-61734 · Severity: low · CVSS 3.1 · Published 2025-10-02

Technologies: org.apache.kylin:kylin (Maven), org.apache.kylin:kylin-core-common (Maven), org.apache.kylin:kylin-common-server (Maven). Vendors: Maven.

Executive brief

Apache Kylin Files or Directories Accessible to External Parties

Affected products

  • Maven org.apache.kylin:kylin
  • Maven org.apache.kylin:kylin-core-metadata
  • Maven org.apache.kylin:kylin-ops-server
  • Maven org.apache.kylin:kylin-core-common
  • Maven org.apache.kylin:kylin-common-server
  • Maven org.apache.kylin:kylin-server
  • Maven org.apache.kylin:kylin-common-service

Related threats