Security¶
Warning
Please read the important note below on October 2026 vulnerabilities
How Dataiku responds to the October 2026 vulnerabilities¶
Dataiku takes steps to ensure the security of its customers among the large number of severe ecosystem vulnerabilities reported in the second half of October 2026
Applicable to all customers¶
PHP¶
Dataiku does not use PHP and is not affected by the “PHP2Shell” classes of vulnerabilities
Node.js¶
Agent Management does not use Node.js and is not affected by the vulnerabilities reported in Node.js
Applicable to Dataiku Cloud Customers¶
Oracle Java¶
Dataiku Cloud does not use Oracle Java.
eMudhra certificates¶
The faulty eMudhra certificates have been revoked and distruted for all Dataiku Cloud customers have been upgraded. This vulnerability is resolved for these customers.
Applicable to Dataiku Cloud Stacks customers¶
General recommendations¶
Given the influx of vulnerabilities, we recommend that you keep watch for OS packages updates, and perform security updates as usual, on a daily basis.
Oracle Java¶
Dataiku Cloud Stacks does not use Oracle Java. Please note however that you may still be affected by the eMudhra certificate issue, please see below.
eMudhra certificates¶
If you are not using Python for building custom KPIs for your agents, no urgent action is required.
If you are, in order to fully distrust the faulty eMudhra certificates, you need to upgrade to one of the Dataiku versions that ship with updated “certifi” Python packages. Please upgrade to Agent Management 15.2.1
You should then rebuild code envs, so that other copies of the “certifi” packages are updated.
Applicable to Dataiku Custom Customers¶
General recommendations¶
Given the influx of vulnerabilities, we recommend that you keep watch for OS packages updates, and perform security updates as usual, on a daily basis.
Oracle Java¶
If you use Oracle Java, you are responsible for upgrading it. Please don’t forget to restart Dataiku after doing so.
eMudhra certificates¶
Please first liaise with your OS provider in order to make sure that you are running updated version of ca-certificates or similar package. You need to restart Agent Management afterwards
If you are not using Python for building custom KPIs for your agents, no further urgent action is required.
If you are, in order to fully distrust the faulty eMudhra certificates, you need to upgrade to one of the Dataiku versions that ship with updated “certifi” Python packages. Please upgrade to Agent Management 15.2.1
You should then rebuild code envs, so that other copies of the “certifi” packages are updated.