CVE-2026-27194 — D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tal…
Published: 2026-02-21 · CVSS: 8.1 · CVSS 4.0
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue has been fixed in version 3.20.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7