Skip to content
OpenAdvisories
High · 7.5 CVE-2025-53710 EUVD-2025-204322GHSA-627q-2hvv-p867

Network boundaries not respected in certain Foundry namespaces.

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by Palantir

Description

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed user-controlled commands locally.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.compute:compute-service — —
Palantir com.palantir.codeassist2:code-assist-proxy — —

References