CVE-2022-27894: Palantir Foundry Blobster

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

Affected products

• Palantir Foundry Blobster: from 3.207.0, before 3.227.0 (fixed in 3.227.0)

Published 2022-11-04. Last modified 2026-06-17.