What’s Vulnerable › Products

Google Cloud Looker vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Google Cloud Looker version is affected

Latest Google Cloud Looker vulnerabilities

• CVE-2026-15810 — Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover (CVSS 8.7)
• CVE-2025-12742 — Remote Code Execution in Looker via Teradata JDBC Driver (CVSS 7.5)
• CVE-2025-12741 — Arbitrary File Write in Denodo dialect of Looker allows Remote Code Execution (CVSS 7.7)
• CVE-2025-12740 — Remote Command Execution in Looker via IBM DB2 JDBC drive (CVSS 7.7)
• CVE-2025-12739 — Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise (CVSS 7.3)
• CVE-2025-12414 — Looker account compromise via punycode homograph attack (CVSS 9.2)
• CVE-2025-12743 — SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database (CVSS 6.0)
• CVE-2025-12472 — Remote Code Execution in Looker due to Improperly Validated Directory Deletion (CVSS 7.1)
• CVE-2025-12155 — Command Injection in Looker (CVSS 7.1)
• CVE-2024-5166 — Insecure Direct Object Reference In Looker (CVSS 6.5)