High severityNVD Advisory· Published Nov 10, 2025· Updated Apr 15, 2026

CVE-2025-12397

Description

A SQL injection vulnerability was found in Looker Studio.

A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source.

This vulnerability was patched on 21 July 2025, and no customer action is needed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Looker Studiollm-fuzzy

Patches

Vulnerability mechanics

References

cloud.google.com/support/bulletinsnvd
www.tenable.com/security/research/tra-2025-28nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000