CVE-2026-125380

MEDIUM 6.5

DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/test

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that allows visitor-role users to execute dataset definitions supplied in the request body. Attackers can specify an arbitrary dataSourceCode and raw SELECT SQL to query any configured relational data source using its stored decrypted credentials, bypassing developer-only restrictions.

CWE	CWE-863
Vendor	gcpaas
Product	dataroom
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for gcpaas dataroom

Be the first to know when new medium vulnerabilities affecting gcpaas dataroom are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

gcpaas / DataRoom

0 ≤ 3.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/gcpaas/DataRoom/issues/25 github.com: https://github.com/gcpaas/DataRoom github.com: https://github.com/gcpaas/DataRoom/blob/3.0.0/dataRoomServer/src/main/java/com/gccloud/gcpaas/dataroom/core/dataset/DatasetController.java#L129-L133 github.com: https://github.com/gcpaas/DataRoom/commit/4022eb30d44501aa502e08696e49cbd2a3b33ae7 vulncheck.com: https://www.vulncheck.com/advisories/dataroom-through-3.0.0-incorrect-authorization-via-dataroom-dataset-run-test

Credits

hieuPenguinnn