CVE-2022-27896

Name of the Vulnerable Software and Affected Versions Palantir Foundry Code-Workbooks versions 4.144 through 4.460.0

Description The issue is related to Information Exposure Through Log Files in Foundry Code-Workbooks. The endpoint backing the console generates service log records of any Python code being run, which includes the Foundry token representing the Code-Workbooks Python console.

Recommendations For versions 4.144 through 4.460.0, upgrade to Code-Workbooks version 4.461.0 to resolve the issue. As a temporary workaround, consider restricting access to the service logs to minimize the risk of exploitation.