Access Control Bypass in Foundry Container Service by Palantir Technologies
CVE-2025-53710
7.5HIGH
What is CVE-2025-53710?
A misconfiguration in specific deployment types within Palantir’s Foundry Container Service allows pods within the same namespace to communicate with each other. This configuration flaw results in a vulnerability that enables access control bypass, allowing a malicious actor to exploit a compromised endpoint and execute user-controlled commands on the local system.
Affected Version(s)
com.palantir.codeassist2:code-assist-proxy 2.1289.0
com.palantir.compute:compute-service 0.1372.0