DuckDB

Everything Threat Times has reported about DuckDB: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

WhoDB 0.104.0 Path Traversal Flaw Lets Attackers Access Host Files

Threat TimesOct 18, 2026

A critical vulnerability in WhoDB allows unauthenticated remote attackers to read and write arbitrary host files via the query editor.

Vulnerabilities

Critical flaw in Redash allows local file read and write via DuckDB

Threat TimesOct 14, 2026

A critical vulnerability in Redash versions 26.0.0 until 26.9.0 enables attackers to read secrets and write files using DuckDB queries.