PT-2025-40602 · Karapace · Karapace

Dugong42 · Published 2025-10-03 · Updated 2025-10-04 · CVE-2025-61673

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Karapace versions 5.0.0 through 5.0.1

Description Karapace, an open-source implementation of Kafka REST and Schema Registry, has an issue where authentication checks are bypassed when OAuth 2.0 Bearer Token authentication is enabled. Specifically, if a request does not include an 'Authorization' header, the token validation process is skipped. This allows unauthorized access to Schema Registry endpoints that should require authentication, effectively disabling the OAuth authentication mechanism.

Recommendations Update to version 5.0.2 or later.

Exploit

Fix

Missing Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-306

CWE-288

Related Identifiers

CVE-2025-61673

GHSA-VQ25-VCRW-GJ53

Affected Products

Karapace

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61673.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-61673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61673 · Security Note
• https://github.com/Aiven-Open/karapace/releases/tag/5.0.2 · Note
• https://github.com/Aiven-Open/karapace/security/advisories/GHSA-vq25-vcrw-gj53 · Note
• https://github.com/Aiven-Open/karapace/pull/1143/commits/c4038e9ce9fa504b433d59ac2944e337292922c7 · Note
• https://twitter.com/VulmonFeeds/status/1974326125103837443 · Twitter Post
• https://twitter.com/CVEnew/status/1974227111662559357 · Twitter Post
• https://t.me/cveNotify/137374 · Telegram Post
• https://t.me/CVEtracker/34064 · Telegram Post