CVE-2025-52449 - AskarLabs CVE Database

CVE-2025-52449

Vendor Salesforce

Product Tableau Server

Weakness CWE-434 · Unrestricted file upload

Published July 25, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Key dates

02Disclosure timeline

July 25, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-52449 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Identifiers

CVE CVE-2025-52449

CWE CWE-434

Affected versions

Vendor Salesforce

Product Tableau Server

Affected < 2025.1.3

Vendor Salesforce

Product Tableau Server

Affected < 2024.2.12

Vendor Salesforce

Product Tableau Server

Affected < 2023.3.19