---
id: "CVE-2026-125380"
page: "https://infrastack.ai/live/CVE-2026-125380"
kind: "vulnerability"
aliases: ["CVE-2026-125380"]
title: "DataRoom: visitor accounts can run arbitrary SQL against connected data sources"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "DataRoom", "fixed": [], "affected": "<= 3.0.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["authenticated", "dataroom", "other", "self-hosted"]
not_affected_if: ["auth-required", "no-visitor-accounts"]
published_at: "2026-11-10T00:17:11+00:00"
first_seen_at: "2026-11-10T00:28:43+00:00"
updated_at: "2026-11-10T00:32:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125380", "first_seen_at": "2026-11-10T00:28:43+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T00:32:28+00:00"}]
exploit_sources: []
---

# DataRoom: visitor accounts can run arbitrary SQL against connected data sources

Link for people: https://infrastack.ai/live/CVE-2026-125380 (this .md is for agents)

DataRoom through 3.0.0 does not restrict DatasetController.runTest to developers, so visitor-role users can send raw SELECT SQL to any configured relational data source, using its stored decrypted credentials. No fixed release is published as of the maintainer's issue #25 (open).

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:DataRoom affected <= 3.0.0 fixed no fixed version listed

## How to check

Check whether you run DataRoom (gcpaas/DataRoom) 3.0.0 or earlier, e.g. the release/jar version of dataRoomServer. If so, any logged-in visitor-role account (or a page-share visitor, per the reporter's title) may be able to call POST /dataRoom/dataset/run/test with a chosen dataSourceCode and raw SELECT SQL. Review web server logs for that path from non-developer accounts.

## Timeline

- 2026-11-10T00:28:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125380
- 2026-11-10T00:32:28+00:00 analyst — VulnCheck advisory read: affects DataRoom <= 3.0.0, CVSS 4.0 7.1, no fixed version stated. Linked 'fix' commit 4022eb3 is a June 28 page-share feature commit (34 files, 1-line DatasetController change) predating the Oct 22 report; not shown to be a fix. Issue #25 still open; latest release is 3.0.0. Not verifying fix. Not exploited/PoC not seen (report on hackmd, not read).

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/dataroom-through-3.0.0-incorrect-authorization-via-dataroom-dataset-run-test
- [discussion] DataRoom issue #25: security report https://github.com/gcpaas/DataRoom/issues/25
- [fix] Patch: github.com https://github.com/gcpaas/DataRoom/commit/4022eb30d44501aa502e08696e49cbd2a3b33ae7

## From the sources

DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that allows visitor-role users to execute dataset definitions supplied in the request body. Attackers can specify an arbitrary dataSourceCode and raw SELECT SQL to query any configured relational data source using its stored decrypted credentials, bypassing developer-only restrictions.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_