File Upload Vulnerability in Salesforce Tableau Server

CVE-2025-26498

What is CVE-2025-26498?

Salesforce Tableau Server is affected by a vulnerability that allows for the unrestricted upload of files with potentially dangerous types. This flaw can be exploited to traverse paths absolutely, compromising system integrity. It impacts deployments on both Windows and Linux platforms. Remediation involves updating to versions beyond Tableau Server 2025.1.3, 2024.2.12, or 2023.3.19 to prevent potential exploitation of this significant security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References