CVE-2025-26497 - AskarLabs CVE Database

CVE-2025-26497

Vendor Salesforce

Product Tableau Server

Weakness CWE-434 · Unrestricted file upload

Published August 22, 2025

Last update August 25, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Key dates

02Disclosure timeline

August 22, 2025 CVE published

August 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-26497 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Identifiers

CVE CVE-2025-26497

CWE CWE-434

Affected versions

Vendor Salesforce

Product Tableau Server

Affected < 2025.1.3

Vendor Salesforce

Product Tableau Server

Affected < 2024.2.12

Vendor Salesforce

Product Tableau Server

Affected < 2023.3.19