A vulnerability marked as problematic has been reported in Apache APISIX 1.0. Impacted is an unknown function. Performing manipulation results in missing encryption of sensitive data.
This vulnerability is identified as CVE-2025-62232. The attack is only possible with local access. There is not any exploit available.
Applying a patch is the recommended action to fix this issue.
