Palantir vulnerabilities
We track 11 vulnerabilities in Palantir products across 20 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2025.
Latest Palantir vulnerabilities
- 9.1 Critical severity
com.palantir.gotham:glutton: Authentication Bypass by Primary Weakness
Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automat
- 7.5 High severity
com.palantir.compute:compute-service: Improper Isolation or Compartmentalization
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Con
- 7.5 High severity
com.palantir.meta:orbital-simulator: Improper Limitation of a Pathname to a Restricted Directory
Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.
- 7.7 High severity
A security defect was identified that enabled a user of Foundry Issues to perform a Denial of…
A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the releas
- 9.8 Critical severity
com.palantir.gotham:clips2: Improper Limitation of a Pathname to a Restricted Directory
Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker cou
- 7.5 High severity
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would…
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources o
- 7.5 High severity
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would…
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.
- 7.4 High severity
AtlasDB: Improper Certificate Validation
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A su
- 7.5 High severity
Foundry Build2: Insertion of Sensitive Information into Log File
Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.
- 7.5 High severity
Foundry Code-Workbooks: Insertion of Sensitive Information into Log File
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the
- 9.1 Critical severity
Foundry Multipass: Improper Control of Dynamically-Managed Code Resources
The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentic