File Upload Vulnerability in Salesforce Tableau Server

CVE-2025-26498

What is CVE-2025-26498?

Salesforce Tableau Server is affected by a vulnerability that allows for the unrestricted upload of files with potentially dangerous types. This flaw can be exploited to traverse paths absolutely, compromising system integrity. It impacts deployments on both Windows and Linux platforms. Remediation involves updating to versions beyond Tableau Server 2025.1.3, 2024.2.12, or 2023.3.19 to prevent potential exploitation of this significant security risk.

References