Dremio vulnerabilities
We track 2 vulnerabilities in Dremio products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2025.
2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score
Latest Dremio vulnerabilities
- 8.4 High severity
Dremio Software: Missing Authorization
An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. Th
- 8.8 High severity
Dremio: Improper Limitation of a Pathname to a Restricted Directory
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders (and the files and datasets in these folders) can access these folders, files, and datasets. To be successful, the user must have access to the source an