Palantir
47 CVEs across 74 Palantir products. Browse Palantir vulnerabilities, severities, and proof-of-concept exploits.
Palantir products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68609 | Medium | 6.6 | 2026-01-22 | A vulnerability in Palantir's Aries service allowed unauthenticated access to log viewing and management functionality on Apollo instances using default config… |
CVE-2025-62487 | Low | 3.5 | 2026-01-09 | On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels… |
CVE-2024-49587 | Critical | 9.1 | 2025-12-19 | Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit gl… |
CVE-2023-30971 | Medium | 6.8 | 2025-12-19 | Gotham Gaia application was found to be exposing multiple unauthenticated endpoints. |
CVE-2025-53710 | High | 7.5 | 2025-12-18 | Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This i… |
CVE-2025-64400 | Medium | 4.1 | 2025-12-18 | Control Panel provides an API for pre-registering into an enrollment and organization prior to a user's first login. The API for creating users checks that th… |
CVE-2025-53709 | Medium | 5.4 | 2025-07-10 | Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small numbe… |
CVE-2024-49589 | Medium | 6.5 | 2025-02-18 | Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument (size). |
CVE-2024-49581 | Medium | 6.5 | 2024-12-02 | Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have per… |
CVE-2024-49588 | Medium | 6.8 | 2024-11-21 | Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections. |
CVE-2023-30968 | Medium | 6.8 | 2024-03-12 | One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP a… |
CVE-2023-30970 | Medium | 6.5 | 2024-01-29 | Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file s… |
CVE-2023-22836 | Low | 3.5 | 2024-01-29 | In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may… |
CVE-2023-30954 | Low | 2.7 | 2023-11-15 | The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not y… |
CVE-2023-30969 | High | 8.2 | 2023-10-26 | The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpo… |
CVE-2023-30967 | Critical | 9.8 | 2023-10-26 | Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files… |
CVE-2023-30961 | Medium | 6.5 | 2023-09-27 | Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly c… |
CVE-2023-30959 | Medium | 4.1 | 2023-09-27 | In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction. |
CVE-2023-30962 | Medium | 6.8 | 2023-09-12 | The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to la… |
CVE-2023-30958 | Medium | 4.7 | 2023-08-03 | A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defe… |
CVE-2023-30952 | Medium | 5.0 | 2023-08-03 | A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. T… |
CVE-2023-30951 | Medium | 6.3 | 2023-08-03 | The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack (XXE). |
CVE-2023-30950 | Medium | 6.5 | 2023-08-03 | The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint |
CVE-2023-30949 | Medium | 4.3 | 2023-07-26 | A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks. |
CVE-2023-30963 | Medium | 5.4 | 2023-07-10 | A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defe… |
CVE-2023-30960 | Medium | 4.3 | 2023-07-10 | A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This d… |
CVE-2023-30956 | Medium | 5.3 | 2023-07-10 | A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew th… |
CVE-2023-22835 | High | 7.7 | 2023-07-10 | A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caus… |
CVE-2023-30955 | Medium | 4.3 | 2023-06-29 | A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'… |
CVE-2023-30946 | Low | 3.5 | 2023-06-29 | A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not s… |
CVE-2023-22834 | Low | 2.7 | 2023-06-27 | The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass fo… |
CVE-2023-30945 | Critical | 9.8 | 2023-06-26 | Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary… |
CVE-2023-22833 | High | 7.6 | 2023-06-06 | Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organiz… |
CVE-2023-30948 | Medium | 6.5 | 2023-06-06 | A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks… |
CVE-2022-48308 | Medium | 6.3 | 2023-02-16 | It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious a… |
CVE-2022-48307 | Medium | 6.3 | 2023-02-16 | It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious… |
CVE-2022-48306 | Medium | 5.7 | 2023-02-16 | Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged ne… |
CVE-2022-27897 | Medium | 5.3 | 2023-02-16 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attack… |
CVE-2022-27892 | Medium | 5.3 | 2023-02-16 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispat… |
CVE-2022-27891 | Medium | 5.3 | 2023-02-16 | Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patc… |
CVE-2022-27890 | Medium | 6.3 | 2023-02-16 | It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious a… |
CVE-2022-27895 | Medium | 4.2 | 2022-11-15 | Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was… |
CVE-2022-27896 | Medium | 4.2 | 2022-11-14 | Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log re… |
CVE-2022-27894 | Medium | 4.8 | 2022-11-04 | The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch… |
CVE-2022-27893 | Medium | 4.2 | 2022-11-04 | The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This v… |
CVE-2022-27889 | Medium | 5.3 | 2022-06-14 | The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A maliciou… |
CVE-2022-27888 | Medium | 5.5 | 2022-04-26 | Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens). This issue was fix… |