An attacker can read system level configuration files in Apache Kylin, exposing sensitive information such as service endpoints, credentials, or internal network structure. The weakness is a misconfigured access control that allows configuration data to be accessed by unauthenticated or low‑privilege users. This is identified as CWE-200, which relates to information exposure through insufficient authorization checks.

Apache Software Foundation: Apache Kylin versions 4.x through 5.0.4 are susceptible. These releases lack appropriate protection for configuration files and are therefore vulnerable to information leakage.

The CVSS score of 7.5 indicates a high severity vulnerability. No EPSS score is available, and it is not listed in CISA KEV, so the exact exploitation probability is unknown. Based on the description, the likely attack vector is misconfigured access to Kylin’s configuration directories or its administrative API, but this inference is not explicitly stated in the input.