CVE-2025-32966: Dataease

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8.

Affected products

• Dataease Dataease: before 2.10.8 (fixed in 2.10.8)

Published 2025-04-23. Last modified 2026-06-17.