CVE-2025-26497

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://help.salesforce.com/s/articleView?id=005132575&type=1	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:tableau:tableau_server::::::::
	cpe:2.3:a:tableau:tableau_server::::::::
	cpe:2.3:a:tableau:tableau_server::::::::

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

06 Nov 2025, 19:46

Type	Values Removed	Values Added
First Time		Linux Microsoft Microsoft windows Tableau Tableau tableau Server Linux linux Kernel
CPE		cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:a:tableau:tableau_server:::::::: cpe:2.3:o:linux:linux_kernel:-:::::::*
References	~~() https://help.salesforce.com/s/articleView?id=005132575&type=1 -~~	() https://help.salesforce.com/s/articleView?id=005132575&type=1 - Vendor Advisory

25 Aug 2025, 21:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.3
Summary		(es) La vulnerabilidad de carga sin restricciones de archivos con tipo peligroso en Salesforce Tableau Server en Windows, Linux (módulos del editor de flujo) permite Absolute Path Traversal. Este problema afecta a Tableau Server: antes de 2025.1.3, antes de 2024.2.12, antes de 2023.3.19.

22 Aug 2025, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-22 21:15

Updated : 2025-11-06 19:46

NVD link : CVE-2025-26497

Mitre link : CVE-2025-26497

CVE.ORG link : CVE-2025-26497

JSON object : View

Products Affected

tableau

tableau_server

linux

linux_kernel

microsoft

windows

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2025-26497", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2025-08-22T21:15:31.330", "references": [{"url": "https://help.salesforce.com/s/articleView?id=005132575&type=1", "tags": ["Vendor Advisory"], "source": "security@salesforce.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@salesforce.com", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19."}, {"lang": "es", "value": "La vulnerabilidad de carga sin restricciones de archivos con tipo peligroso en Salesforce Tableau Server en Windows, Linux (m\u00f3dulos del editor de flujo) permite Absolute Path Traversal. Este problema afecta a Tableau Server: antes de 2025.1.3, antes de 2024.2.12, antes de 2023.3.19."}], "lastModified": "2025-11-06T19:46:09.343", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19541292-4BD4-4BD5-AA68-3836ECC1EBE0", "versionEndExcluding": "2023.3.19"}, {"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AC0483E-569A-497C-BB94-D129FACC17D5", "versionEndExcluding": "2024.2.12", "versionStartIncluding": "2024.2"}, {"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E78711C-389B-4E20-9623-8B0CF6BBCAC8", "versionEndExcluding": "2025.1.3", "versionStartIncluding": "2025.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@salesforce.com"}