Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

🗓️ 07 Jul 2026 14:34:47Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 6 Views

Apache Superset SQLLab allows unauthorized write due to read-only misidentification on Postgres databases. Upgrade to 4.1.0.

Reporter	Title	Published	Views	Family All 17
bdu_fstec	The vulnerability of the Apache Superset data visualization software lies in its authentication procedures’ flaws, which allow unauthorized users to gain unauthorized access to read, modify, or delete data.	19 Dec 202400:00	–	bdu_fstec
circl	CVE-2024-55633	12 Dec 202414:41	–	circl
cnnvd	Apache Superset 安全漏洞	12 Dec 202400:00	–	cnnvd
cve	CVE-2024-55633	12 Dec 202414:36	–	cve
cvelist	CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202414:36	–	cvelist
euvd	EUVD-2024-3442	3 Oct 202520:07	–	euvd
github	Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202415:31	–	github
nvd	CVE-2024-55633	12 Dec 202415:15	–	nvd
osv	BIT-SUPERSET-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	5 Feb 202507:24	–	osv
osv	CVE-2024-55633 Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access	12 Dec 202414:36	–	osv

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-55633
github	www.github.com/apache/superset
lists	www.lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb
openwall	www.openwall.com/lists/oss-security/2024/12/12/1
pypi	www.pypi.org/project/apache-superset
github	www.github.com/advisories/GHSA-787v-v9vq-4rgv

07 Jul 2026 17:23Current

6Medium risk

Vulners AI Score6

CVSS 3.16.5

CVSS 47.1

EPSS0.02562

SSVC