Palantir vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 202328
3. 20245
4. 20256
5. 20262

Newest CVEs

• CVE-2025-68609

  Authentication bypass in Aries due to misconfiguration

  Palantir · com.palantir.aries:aries

  Medium6.6
• CVE-2025-62487

  Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.

  Palantir · com.palantir.acme:gotham-default-apps-bundle

  Low3.5
• CVE-2023-30971

  Gaia unauthenticated endpoints

  Palantir · com.palantir.acme.gaia:gaia

  Medium6.8
• CVE-2024-49587

  Glutton V1 endpoints missing authentication

  Palantir · com.palantir.gotham:glutton

  Critical9.1
• CVE-2025-53710

  Network boundaries not respected in certain Foundry namespaces.

  Palantir · com.palantir.compute:compute-service

  High7.5
• CVE-2025-64400

  Insufficient permission checks when pre-enrolling users Summary

  Palantir · com.palantir.controlpanel:control-panel

  Medium4.1
• CVE-2025-53709

  Access control issues impacting secure-upload service

  Palantir · com.palantir.secupload:secure-upload

  Medium5.4
• CVE-2024-49589

  Foundry artifacts denial of service

  Palantir · com.palantir.artifacts:artifacts

  Medium6.5
• CVE-2024-49581

  Access control issue impacting RV backed objects

  Palantir · com.palantir.gotham:external-artifacts

  Medium6.5
• CVE-2024-49588

  Multiple authenticated SQL injections in oracle-sidecar

  Palantir · com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar

  Medium6.8