CVE-2025-68609: Authentication bypass in Aries due to misconfiguration
A vulnerability in Palantir's Aries service allowed unauthenticated access to log viewing and management functionality on Apollo instances using default configuration. The defect resulted in both authentication and authorization checks being bypassed, potentially allowing any network-accessible client to view system logs and perform operations without valid credentials. No evidence of exploitation was identified during the vulnerability window.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68609?
CVE-2025-68609 has been classified as a high severity vulnerability due to its potential for authentication bypass.
How do I fix CVE-2025-68609?
To fix CVE-2025-68609, reconfigure the Palantir Aries service to disable default settings that allow unauthenticated access.
What systems are affected by CVE-2025-68609?
CVE-2025-68609 specifically affects instances using Palantir's Aries service configured with default settings.
What are the potential impacts of CVE-2025-68609?
The impact of CVE-2025-68609 includes unauthorized access to log viewing and management functionalities.
Is there a patch for CVE-2025-68609?
As of now, there is no specific patch mentioned for CVE-2025-68609, and remediation involves changing configuration settings.