Skip to content
OpenAdvisories

Vendor

lightdash

7 known vulnerabilities.

Products

lightdash 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-121631

    Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints

    Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that allows authenticated users with update Project permission on one project to access and modify dashboards belonging to a different project, caused by the…

    lightdash lightdash
  • Medium 4.2
    CVE-2026-108747

    Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

    Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access tokens by supplying their UUID. Attackers can send DELETE requests to the personal-access-tokens rou…

    lightdash lightdash
  • Medium 6.4
    CVE-2026-72846

    Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

    Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected v…

    lightdash lightdash
  • Medium 5.4
    CVE-2024-6585

    Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functional…

    lightdash lightdash