PT-2025-24400 · Authorino · Authorino

Published 2025-06-09 · Updated 2025-07-03 · CVE-2025-25208

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Authorino (affected versions not specified)

Description A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-25208

GHSA-VQVV-2WJ5-Q34W

GO-2025-3747

OPENSUSE-SU-2025:15225-1

Affected Products

Authorino

References · 40

• https://osv.dev/vulnerability/GO-2025-3747 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15225-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25208 · Security Note
• https://osv.dev/vulnerability/GHSA-vqvv-2wj5-q34w · Vendor Advisory
• https://github.com/Kuadrant/authorino · Note
• https://suse.com/security/cve/CVE-2025-2571 · Note
• https://suse.com/security/cve/CVE-2025-22874 · Note
• https://suse.com/security/cve/CVE-2025-1792 · Note
• https://suse.com/security/cve/CVE-2025-3611 · Note
• https://suse.com/security/cve/CVE-2025-3230 · Note
• https://t.me/cvenotify/125039 · Telegram Post
• https://suse.com/security/cve/CVE-2025-3260 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2347436 · Note
• https://t.me/cvetracker/25746 · Telegram Post
• https://suse.com/security/cve/CVE-2025-4128 · Note