Skip to content
fr Sign in
7.6 High

CVE-2025-12397 A SQL injection vulnerability was found in Looker Studio

Description

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 July 2025, and no customer action is needed.

Affected products and versions

Product Affected versions Fixed in
Looker Studio 2025 earliest → < 2025-07-21 2025-07-21

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Looker Studio

The 3 CVEs of Looker Studio →
CVE-2025-12405 An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors 7.7 High CVE-2025-12409 A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data… 7.3 High
Track this CVE