← Database

CVE-2025-46566

CRITICAL CVSS: 9.8 Published: 2025-05-01 Modified: 2026-06-17

Description

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.

Affected Platforms

Dataease Dataease

Weakness Type

CWE-284, CWE-923, NVD-CWE-Other

References