VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Nov 14, 2022· Updated Jun 17, 2026

CVE-2022-27896

CVE-2022-27896

Description

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Palace/Foundry Code Workbooks3 versions
    cpe:2.3:a:palantir:foundry_code-workbooks:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:palantir:foundry_code-workbooks:*:*:*:*:*:*:*:*range: >=4.144.0,<4.461.0
    • (no CPE)range: 4.144 to 4.460.0
    • (no CPE)range: 4.144
  • Foundry/Code-Workbooksllm-create
    Range: 4.144 to 4.460.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.