CVE-2025-53710

Network boundaries not respected in certain Foundry namespaces.

State: Published
Severity: 7.5 High
Published: Dec 18, 2025
Updated: Dec 18, 2025
Reserved: Jul 8, 2025

Description

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed user-controlled commands locally.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Palantir

Weaknesses

CWE-653 The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

Affected Products

Product	Versions
com.palantir.compute:compute-servicePalantir	0.1372.0 and laterNot affected
com.palantir.codeassist2:code-assist-proxyPalantir	2.1289.0 and laterNot affected

References

https://palantir.safebase.us/?tcuUid=4dbae101-79da-433c-8184-c70b78f4701b

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.