CVE-2021-27225: Dataiku Data Science Studio

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

Affected products

• Dataiku Data Science Studio: before 8.0.6 (fixed in 8.0.6)

Published 2021-03-01. Last modified 2026-06-17.