CVE-2026-76083 | getredash Redash up to 26.8.x JSON data source query runner json_ds.py _get_all_results server-side request forgery

October 14, 2026 Yanac

A vulnerability was found in getredash Redash up to 26.8.x. It has been rated as problematic. Affected is the function _get_all_results of the file redash/query_runner/json_ds.py of the component JSON data source query runner. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-76083. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More