CVE-2025-12155

creationtimestamp| type| source ---|---|--- 2025-11-10 09:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5be2jdo4r2q 2025-11-10 12:10:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5blor7yvwr2...

CVE-2025-12155 Command Injection in Looker

A Command Injection vulnerability, resulting from improper file path sanitization Directory Traversal in Looker allows an attacker with Developer permission to execute arbitrary shell commands when a user is deleted on the host system. Looker-hosted and Self-hosted were found to be vulnerable. Th...