CVE-2025-28244

8.8 highEPSS 0.5%

High (8.8) in alteryx alteryx server. EPSS 0.5% chance of exploitation in the next 30 days.

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-922
Published: 2025-07-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

alteryx:alteryx_server

References

https://alteryx.com
https://gist.github.com/DylanGrl/2771afe86bdd2665b83f28c1ff5c12eb

Check your stack JSON