Insufficient access control for Stories exports

Information

• Advisory ID: DSA-2026-005

• CVSS Base Score: 3.1

• CVSS String: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

• Severity: Low

• CWE classification: CWE-377

Summary

In Dataiku DSS before 14.6.0, insufficient access control could allow a user to download stories exports of other users

Affected Products

• Dataiku DSS before 14.6.0

Fix

Dataiku 14.6.0 has been made available to customers to remediate this issue.