VULNERABILITY INTELLIGENCE

CVE-2025-58137

CVSS score8.1 HIGH

EPSS probability0.39%

CISA KEVNot currently listed

Published2025-12-12

Last modified2026-10-07

Description

Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.