CVE-2023-22836: In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants.

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-29 · updated 2026-06-17
Weakness: CWE-862

Description

In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s tenants.

Affected products

Palantir com.palantir.skywise:guardian: before 2.278.0 — fixed in 2.278.0

How to fix

Upgrade to a fixed version: Palantir com.palantir.skywise:guardian 2.278.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-22836 or the next vulnerability affects your stack