CNNVD-202510-775 Information

CNNVD ID

CNNVD-202510-775

CVE-2025-61778

  • CNNVD Published: 2025-10-06

Description (Chinese)

Akka.NET是Akka.NET开源的一个分布式并发编程框架。 Akka.NET 1.2.0版本至1.5.51版本存在访问控制错误漏洞,该漏洞源于未实现相互TLS认证,可能导致未经授权访问。

Description (English)

Akka.NET is a distributed and distributed programming framework for Akka.NET open sources. Access control error gaps exist in Akka.NET 1.2.0 to 1.5.51, which stem from the failure to achieve mutual TLS certification and may lead to unauthorized access.

Hazard Level

Low

Vulnerability Type

访问控制错误

Affected Vendor

Akka.NET

Published

2025-10-06

Last Modified

2026-02-24

References

https://getakka.net/articles/remoting/security.html https://github.com/akkadotnet/akka.net/pull/7847 https://github.com/akkadotnet/akka.net/pull/7851 https://github.com/akkadotnet/akka.net/releases/tag/1.5.52 https://github.com/akkadotnet/akka.net/security/advisories/GHSA-jhpv-4q4f-43g5

Patch

https://getakka.net/

Share on: