CVE-2022-27895: A component in Foundry logging was found to be capturing sensitive information in logs.

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-15 · updated 2026-06-17
Weakness: CWE-532

Description

Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.

Affected products

Palantir Foundry Build2: before 1.785.0 — fixed in 1.785.0

How to fix

Upgrade to a fixed version: Palantir Foundry Build2 1.785.0. Check the vendor advisory for mitigations.

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-06.md
https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-06.md

Get alerted when CVE-2022-27895 or the next vulnerability affects your stack