Skip to content
OpenAdvisories

Vendor

Dremio

1 known vulnerabilities.

Products

Dremio Software 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2025-2298

    Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software

    An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. T…

    Dremio Dremio Software