CVE-2025-12414

CRITICO 9.2CVE-2025-12414 · Published 20/11/2025 · updated 18/10/2026

In breve

CVE-2025-12414 è una vulnerabilità CRITICO (CVSS 9.2).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.38%, superiore al 31.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted. The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ : * 24.12.100+ * 24.18.193+ * 25.0.69+ * 25.6.57+ * 25.8.39+ * 25.10.22+ * 25.12.0+

References

cloud.google.com/support/bulletins

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free