Sensitive Information Storage Flaw in Tableau Server by Salesforce

CVE-2025-26495

What is CVE-2025-26495?

A vulnerability in Salesforce's Tableau Server allows for the insecure storage of Personal Access Tokens (PAT) within logging repositories. This flaw poses a significant risk as it may expose sensitive authentication credentials to unauthorized access. Affected versions of Tableau Server include all releases prior to 2022.1.3, as well as multiple earlier versions. Organizations using these versions should consider assessing their configurations and implementing necessary security measures to mitigate potential data leaks.

References