Unauthorized Access to Restricted Data in Palantir Foundry

CVE-2024-49589

What is CVE-2024-49589?

An identified software bug in Palantir Foundry's Object Explorer component allowed users without the necessary permissions to bypass restrictions on viewing certain objects. This issue arose under specific conditions, although it did not permit any unauthorized data access across different organizational boundaries or to unauthenticated users. Palantir has swiftly addressed this vulnerability with a patch that has been automatically deployed to all instances managed by Apollo, ensuring user data remains secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References