CVE-2025-62487

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts (e.g. other dossiers and presentations). On deployments configured with CBAC, the front-end would present a security picker dialog to set the security level on the uploads, thereby mitigating the issue. On deployments without a CBAC configuration, no security picker dialog appears, leading to a security level of CUSTOM with no markings or datasets selected. The resulting markings and groups for the file uploads thus will be only those added by the default authorization rules defined in the Auth Chooser configuration. On most environments, it is expected that the default authorization rules only add the Everyone group.

• CWE-863

• https://palantir.safebase.us/?tcuUid=c91a1b4f-72e7-4959-9e2d-3a341e5c7a1f

Published

Jan 9, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6248A cross-site scripting (XSS) vulnerability was reported in t…7.4
• CVE-2025-62480Vulnerability in the Oracle ZFS Storage Appliance Kit produc…2.7
• CVE-2025-62481Vulnerability in the Oracle Marketing product of Oracle E-Bu…9.8
• CVE-2025-62482Cross-site scripting in Zoom Workplace for Windows before ve…6.1
• CVE-2025-62483Improper removal of sensitive information in certain Zoom Cl…7.5
• CVE-2025-62484Inefficient regular expression complexity in certain Zoom Wo…9.8
• CVE-2025-6249An authentication bypass vulnerability was reported in FileZ…8.4
• CVE-2025-62490In quickjs, in js_print_object, when printing an array, the …8.8
• CVE-2025-62491A Use-After-Free (UAF) vulnerability exists in the QuickJS e…8.8
• CVE-2025-62492A vulnerability stemming from floating-point arithmetic prec…6.5
• CVE-2025-62493A vulnerability exists in the QuickJS engine's BigInt string…6.5
• CVE-2025-62494A type confusion vulnerability exists in the handling of the…8.8