| CVE-2026-15810 |
A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68,…
|
8.7
High
|
Jul 24, 2026 |
| CVE-2025-12742 |
A Looker user with a Developer role could cause Looker to execute a malicious command, due to insecure processing of…
|
7.5
High
|
Nov 25, 2025 |
| CVE-2025-12741 |
A Looker user with Developer role could create a database connection using Denodo driver and, by manipulating LookML,…
|
7.7
High
|
Nov 24, 2025 |
| CVE-2025-12740 |
A Looker user with a Developer role could create a database connection using IBM DB2 driver and, by manipulating LookML,…
|
7.7
High
|
Nov 24, 2025 |
| CVE-2025-12739 |
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would…
|
7.3
High
|
Nov 24, 2025 |
| CVE-2025-12414 |
An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email…
|
9.2
Critical
|
Nov 20, 2025 |
| CVE-2025-12743 |
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a…
|
6.0
Medium
|
Nov 19, 2025 |
| CVE-2025-12472 |
An attacker with a Looker Developer role could manipulate a LookML project to exploit a race condition during Git…
|
7.1
High
|
Nov 19, 2025 |
| CVE-2025-12155 |
A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows…
|
7.1
High
|
Nov 10, 2025 |
| CVE-2024-5166 |
An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users…
|
6.5
Medium
|
May 22, 2024 |