CVE-2025-53648

MEDIUM 5.4CVE-2025-53648 · Published 30/06/2026 · updated 29/09/2026

In short

CVE-2025-53648 is a MEDIUM (CVSS 5.4) vulnerability affecting gravitino (apache).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.7% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
gravitino apache	`≥ 0.5.0, < 1.0.0`	`1.0.0`

Description

SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue.

References

lists.apache.org/thread/s0hytcv17z52dwp5dojjjwgrtqtyh2xk · Mailing List
openwall.com/lists/oss-security/2026/06/30/2 · Mailing List

More vulnerabilities in gravitino

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free