Salesforce Tableau Server Unrestricted File Upload Vulnerability Leading to Remote Code Execution

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in Salesforce Tableau Server. This issue is present in versions prior to 2025.1.3, prior to 2024.2.12, and prior to 2023.3.19, on both Windows and Linux platforms, specifically within Extensible Protocol Service modules. The vulnerability allows for alternative execution due to deceptive filenames, leading to remote code execution.

Impact

Exploitation of this vulnerability allows for remote code execution on the server.

Remediation

Users are advised to update Tableau Server to the latest supported Maintenance Release in their branch, available on the Tableau Server Maintenance Release page. Additionally, customers with a Trino driver installed should update to the latest version. Those running an unsupported version of Tableau Server are recommended to upgrade to a compatible supported version.