CVE-2022-27896 - CVE House
Back to Database
Status published Medium CVE-2022-27896

The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

Vulnerability Description

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27896

Credits & Attribution

No credits recorded in the NVD database.

References

More from Palantir

View All →
CVE-2025-68609
Authentication bypass in Aries due to misconfiguration
Medium 6.6
CVE-2025-64400
Insufficient permission checks when pre-enrolling users Summary
Medium 4.1
CVE-2025-62487
Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.
Low 3.5
CVE-2025-53710
Network boundaries not respected in certain Foundry namespaces.
High 7.5
CVE-2025-53709
Access control issues impacting secure-upload service
Medium 5.4

Affected Vendor

Affected Software

Foundry Code-Workbooks
Vulnerable Versions:
4.144, unspecified

Timeline

Official Publish: November 14th, 2022
Last Modified: April 30th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-532

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1555 Credentials from Password Stores
Credential Access
T1078 Valid Accounts
Persistence
T1562 Impair Defenses
Defense Evasion