Vendor

Palantir

47 known vulnerabilities.

Products

com.palantir.foundry:foundry-frontend 4 Gotham 3 com.palantir.issues:issues 2 com.palantir.acme.gaia:gaia 2 com.palantir.comments:comments 2 sls-logging 1 com.palantir.aries:aries 1 Palantir Gotham Chat IRC helper 1 Foundry Magritte 1 com.palantir.secupload:secure-upload 1 Foundry Build2 1 Foundry Code-Workbooks 1 com.palantir.gotham:external-artifacts 1 Foundry Blobster Service 1 com.palantir.acme:gotham-default-apps-bundle 1 com.palantir.acme:stencil-app-bundle 1 com.palantir.acme:dossier-app 1 com.palantir.compute:compute-service 1 com.palantir.codeassist2:code-assist-proxy 1 Foundry Issues 1 com.palantir.contour:contour-dispatch 1 Foundry Multipass 1 com.palantir.workspace:workspace 1 com.palantir.gotham:blackbird-witchcraft 1 com.palantir.skywise:guardian 1 AtlasDB 1 com.palantir.artifacts:artifacts 1 com.palantir.gotham:glutton 1 com.palantir.lime:lime2 1 Foundry Magritte plugin osisoft-pi-web-connector 1 com.palantir.tiles:tiles 1 com.palantir.acme.cerberus:cerberus 1 com.palantir.slate:slate 1 com.palantir.meta:orbital-simulator 1 com.palantir.magritte:magritte-rest-source-bundle 1 com.palantir.foundry.jobtracker:job-tracker 1 com.palantir.campaigns:campaigns 1 com.palantir.acme:gotham-fe-bundle 1 com.palantir.acme:titanium-browser-app-bundle 1 com.palantir.controlpanel:control-panel 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.1

CVE-2024-49587

Glutton V1 endpoints missing authentication

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automa…

Palantir com.palantir.gotham:glutton

Dec 19, 2025
Critical 9.8

CVE-2023-30967

Gotham Orbital Simulator path traversal

Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.

Palantir com.palantir.meta:orbital-simulator

Oct 25, 2023
Critical 9.8

CVE-2023-30945

CVE-2023-30945

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker co…

Palantir com.palantir.video:video-clip-distributor com.palantir.video:video-history-server com.palantir.gotham:clips2

Jun 26, 2023