Sensitive Information Storage Flaw in Tableau Server by Salesforce

CVE-2025-26495

What is CVE-2025-26495?

A vulnerability in Salesforce's Tableau Server allows for the insecure storage of Personal Access Tokens (PAT) within logging repositories. This flaw poses a significant risk as it may expose sensitive authentication credentials to unauthorized access. Affected versions of Tableau Server include all releases prior to 2022.1.3, as well as multiple earlier versions. Organizations using these versions should consider assessing their configurations and implementing necessary security measures to mitigate potential data leaks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References