Lightdash vulnerabilities
7 published CVEs name Lightdash among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-121631
Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints
lightdash · lightdash
Low2.3 - CVE-2026-61654
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
lightdash · lightdash
High8.3 - CVE-2026-61576
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
lightdash · lightdash
High8.3 - CVE-2026-108747
Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion
Lightdash · lightdash
Low2.3 - CVE-2026-72846
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
lightdash · lightdash
Medium5.3 - CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that…
Lightdash · Lightdash
High7.3 - CVE-2024-6585
Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows…
Lightdash · Lightdash
Medium5.4