Unauthenticated Access Vulnerability in Palantir's Aries Service

CVE-2025-68609

What is CVE-2025-68609?

A vulnerability in Palantir's Aries service allows unauthorized users to access log viewing and management functionality due to improper authentication and authorization checks. This issue emerges when the service is configured with default settings, exposing system logs and enabling actions without valid login credentials. Despite the potential severity of this flaw, no evidence has been found to suggest active exploitation during the identified window.

References