Race Condition Vulnerability in Looker by Google Cloud

CVE-2025-12472

What is CVE-2025-12472?

A race condition vulnerability exists in Looker where an attacker with a Developer role could manipulate a LookML project to exploit a timing issue during the deletion of Git directories. This exploitation could allow arbitrary command execution on affected Looker instances. While Looker-hosted instances have been mitigated automatically, users of self-hosted versions should promptly upgrade to the latest versions identified, which have been patched to safeguard against this issue.

References