Executive brief
D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
Affected products
- PyPI dtale
Junglewise Threat Intelligence
CVE-2026-27194: PYSEC-2026-2461 - D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
CVE-2026-27194 · Severity: medium · CVSS 4 · Published 2026-07-13
Technologies: dtale (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2460 - D-Tale: Remote Code Execution through redis/shelf storage
- PYSEC-2026-1320 - D-Tale allows Remote Code Execution through the Custom Filter Input
- PYSEC-2026-1321 - D-Tale Command Execution Vulnerability
- PYSEC-2026-1323 - D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
- PYSEC-2026-1319 - D-Tale server-side request forgery through Web uploads