com.palantir.gotham:glutton vulnerabilities

1 known vulnerability in com.palantir.gotham:glutton from Palantir. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  com.palantir.gotham:glutton: Authentication Bypass by Primary Weakness

  CVE-2024-49587Dec 19, 2025Palantir

  Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automat