CyberSecBulletin

PostHog vulnerabilities

We track 2 vulnerabilities in PostHog products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2025.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest PostHog vulnerabilities

  • 8.0 High severity

    PostHog: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-1520PostHog

    PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability.

  • 8.3 High severity

    PostHog: Server-Side Request Forgery

    CVE-2024-9710PostHog

    PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerabilit