CVE-2025-61020 is a high-severity vulnerability affecting openlink virtuoso-opensource version 7.2.11. It arises from a flaw in the sqlo_strip_in_join component that can be triggered by specially crafted SQL statements to cause a Denial of Service (DoS) condition. The CVSS v3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with low attack complexity. The vulnerability impacts availability only, with no confidentiality or integrity loss. The vendor advisory from Red Hat does not provide explicit patch or remediation information, and no known exploits have been reported.

Successful exploitation of this vulnerability results in Denial of Service, causing the affected service to become unavailable. There is no impact on data confidentiality or integrity. The attack can be performed remotely without authentication or user interaction, making it a significant availability risk for systems running the affected version.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-61020 for current remediation guidance. Until an official fix is available, consider limiting exposure of the vulnerable service to untrusted networks and monitor for unusual activity related to SQL queries targeting the sqlo_strip_in_join component.