CVE-2025-28244

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.51% chance of exploitation in the next 30 days, 43rd percentile

Published

2025-07-10

Updated

2025-07-11

Proof-of-concept exploits (1)

• https://gist.github.com/DylanGrl/2771afe86bdd2665b83f28c1ff5c12eb

Security advisories

• https://alteryx.com

References

• CVE Record
• NVD entry