CVE Intelligence

Running-elephant vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Running-elephant products: 2 record(s), with severity, exploitation and fixes.

Datart 2

Exploited only (KEV) →

CVE-2025-70828 High · 8.8 CWE-78 Feb 17, 2026
OS Command Injection in Running-elephant Datart
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
CVE-2025-70829 Medium · 5.7 CWE-200 Feb 17, 2026
Exposure of Sensitive Information in Running-elephant Datart
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.