Palantir vulnerabilities
47 published CVEs name Palantir among the affected products.
- 47Published CVEs47 of them scored
- 6Last 12 monthspublished in the last year
- 3Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-68609
Authentication bypass in Aries due to misconfiguration
Palantir · com.palantir.aries:aries
Medium6.6 - CVE-2025-62487
Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.
Palantir · com.palantir.acme:gotham-default-apps-bundle
Low3.5 - CVE-2023-30971
Gaia unauthenticated endpoints
Palantir · com.palantir.acme.gaia:gaia
Medium6.8 - CVE-2024-49587
Glutton V1 endpoints missing authentication
Palantir · com.palantir.gotham:glutton
Critical9.1 - CVE-2025-53710
Network boundaries not respected in certain Foundry namespaces.
Palantir · com.palantir.compute:compute-service
High7.5 - CVE-2025-64400
Insufficient permission checks when pre-enrolling users Summary
Palantir · com.palantir.controlpanel:control-panel
Medium4.1 - CVE-2025-53709
Access control issues impacting secure-upload service
Palantir · com.palantir.secupload:secure-upload
Medium5.4 - CVE-2024-49589
Foundry artifacts denial of service
Palantir · com.palantir.artifacts:artifacts
Medium6.5 - CVE-2024-49581
Access control issue impacting RV backed objects
Palantir · com.palantir.gotham:external-artifacts
Medium6.5 - CVE-2024-49588
Multiple authenticated SQL injections in oracle-sidecar
Palantir · com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar
Medium6.8