CVE-2025-15097: Alteryx Server

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 2023.1.1.13.486, 2023.2.1.10.293, 2024.1.1.9.236, 2024.2.1.6.125 and 2025.1.1.1.31 can resolve this issue. Upgrading the affected component is recommended.

Affected products

• Alteryx Server: version 2020.2.3.27789 only; version 2021.4.2.47895 only; version 2022.1.1.30961 only; version 2022.1.1.42707 only; version 2023.1.1.123 only; version 2023.1.1.306 only; …

Published 2025-12-26. Last modified 2026-06-17.