What is CVE-2025-61679?

CVE-2025-61679 is a high-severity vulnerability in Julien040 Anyquery, classified under Information Disclosure. CVSS score: 7.7/10. Published 2025-10-03.

How severe is CVE-2025-61679?

High severity. CVSS v3 base score is 7.7 out of 10.

Auth bypass in Julien040 Anyquery

CVE-2025-61679

Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of a foreign login from the provider. This issue is fixed in version 0.4.4.

Vulnerability class: Information Disclosure

EPSS: 0.001 (4.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Julien040 Anyquery — versions < 0.4.4

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-61679?: CVE-2025-61679 is a high-severity vulnerability in Julien040 Anyquery, classified under Information Disclosure. CVSS score: 7.7/10. Published 2025-10-03.
How severe is CVE-2025-61679?: High severity. CVSS v3 base score is 7.7 out of 10.