Vulnerability · Published Dec 18, 2025 · Assigned by Palantir
CVE-2025-53710Network boundaries not respected in certain Foundry namespaces.
High 7.5
In plain English
A high-severity security flaw in com.palantir.codeassist2:code-assist-proxy from Palantir. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 79.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed user-controlled commands locally.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palantir | com.palantir.compute:compute-service | see references |
| Palantir | com.palantir.codeassist2:code-assist-proxy | see references |
Weakness: CWE-653 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H