CVE-2023-30955: Foundry workspace-server Developer Mode Authorization Bypass

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-29 · updated 2026-06-17
Weakness: CWE-602

Description

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0.

Affected products

Palantir Foundry Workspace-Server: before 7.7.0 — fixed in 7.7.0

How to fix

Upgrade to a fixed version: Palantir Foundry Workspace-Server 7.7.0. Check the vendor advisory for mitigations.

References

https://palantir.safebase.us/?tcuUid=0c3f6c33-4eb0-48b5-ab87-fe48c46a4170
https://palantir.safebase.us/?tcuUid=0c3f6c33-4eb0-48b5-ab87-fe48c46a4170

Get alerted when CVE-2023-30955 or the next vulnerability affects your stack