CVE-2026-77371 | getredash Redash up to 26.8.x DuckDB Query Runner duckdb.py _connect enable_external_access information disclosure

October 14, 2026 Yanac

A vulnerability categorized as problematic has been discovered in getredash Redash up to 26.8.x. Affected by this vulnerability is the function _connect of the file redash/query_runner/duckdb.py of the component DuckDB Query Runner. The manipulation of the argument enable_external_access results in information disclosure.

This vulnerability was named CVE-2026-77371. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More