CyberSecBulletin

DataRecce vulnerabilities

We track 1 vulnerability in DataRecce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest DataRecce vulnerabilities

  • 7.8 High severity

    recce: External Control of File Name or Path

    CVE-2026-49360DataRecceEPSS 1.07%

    Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the q