Skip to content

Tableau Python Server (TabPy) installations may be configured to execute arbitrary python code without authentication

Latest
Latest
Compare
Choose a tag to compare
@jakeichikawasalesforce jakeichikawasalesforce released this 28 Jun 20:49
· 10 commits to master since this release
2.9.0
96aa262
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

v2.9.0

An unauthenticated attacker could perform remote code execution on TabPy instances that do not have authentication enabled. This release now requires confirmation to continue when starting TabPy without authentication, with a warning that this is an insecure state and not recommended.

Assets 2