PT-2025-34494 · Tableau · Tableau Server

Published 2025-08-22 · Updated 2025-10-30 · CVE-2025-52451

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19

Description: An improper input validation issue exists in the tabdoc api - create-data-source-from-file-upload modules of Tableau Server on Windows and Linux, allowing for absolute path traversal.

Recommendations: Update Tableau Server to version 2025.1.3 or later. Update Tableau Server to version 2024.2.12 or later. Update Tableau Server to version 2023.3.19 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-52451

Affected Products

Tableau Server

References · 6

• https://help.salesforce.com/s/articleView?id=005132575&type=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52451 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52451 · Vendor Advisory
• https://twitter.com/CVEnew/status/1958995447122731414 · Twitter Post
• https://t.me/CVEtracker/30740 · Telegram Post
• https://t.me/cveNotify/140960 · Telegram Post