Access control issues that could allow attackers to perform unauthorized reads and writes of data

Information

• Advisory ID: DSA-2026-021

• CVSS Base Score: 8.1

• CVSS String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

• Severity: High

• CWE classification: CWE-284

Summary

In Dataiku before 14.7.7, and in Dataiku between 15.0.0 inclusive and 15.2.2 exclusive, access control issues could allow authenticated attackers to read and write data without authorization.

Affected Products

• Dataiku before 14.7.7

• Dataiku between 15.0.0 inclusive and 15.2.2 exclusive

Fix

Dataiku 14.7.7 and 15.2.2 have been made available to customers to remediate this issue.