Security fixes in flink 2.2.0-r0 (CVE-2025-68161)
Affects flinkSource GCVE Database
Not known to be exploited · fixed in 2.2.0-r0 : update flink when convenient.
Data as of 10/25/2026, 07:59:03 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.7% chance of exploitation in 30 days – higher than 55% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 2.2.0-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartflink | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to flink version 2.2.0-r0 to remediate the vulnerability CVE-2025-68161. Since a patch is available, applying this official fix is the recommended mitigation.
Description
The flink package version 2.2.0-r0 addresses a security vulnerability identified as CVE-2025-68161. This version includes fixes for the vulnerability. No CVSS score or detailed technical impact information is provided for this issue.
Impact
The specific impact of CVE-2025-68161 is not detailed in the provided information. However, the presence of a security fix indicates that the vulnerability could potentially affect the security posture of flink installations prior to version 2.2.0-r0.
Summary
CVE-2025-68161 is a security vulnerability affecting the flink package. The vulnerability is fixed in version 2.2.0-r0 of flink. No additional technical details or exploitation methods are described in the available data.