Horizon Alert
Summary of the vulnerability and why it matters
A vulnerability in the DuckDB query runner for Redash could allow a user with query access to retrieve or write files using the Redash process's privileges. This could potentially expose sensitive application secrets, leading to forged sessions and authentication bypass.
- Allows unauthorized file access or modification.
- Critical for protecting sensitive application secrets.
- Confirm relevance and assess potential exposure.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by leveraging a user who already has query access to a DuckDB data source within Redash. This access allows the attacker to use built-in file-reading or writing functions of DuckDB, potentially leading to the disclosure of sensitive application secrets or unauthorized file modifications with the privileges of the Redash process.
- Requires query access to a DuckDB data source.
- Attacker uses native DuckDB file functions.
- Risk of reading secrets or writing files.
Live Threat
Current exploitation, exposure, and threat context
A user with query access to an administrator-created DuckDB data source could leverage native file-reading functions to access files readable by the Redash process. This could also allow writing files with the process's privileges, potentially exposing sensitive application secrets like API keys or session tokens.
- Application files and secrets.
- Query access to read/write files.
- Forged sessions and authentication bypass.
Operational Fix
Recommended remediation, mitigation, and detection steps
The Redash application owner, likely a data or platform team, is responsible for addressing this vulnerability. The first step is to identify all Redash instances, confirm their accessibility and criticality, and locate the specific asset owner. Subsequently, a remediation plan should be developed based on the assessed risk.
- Data platform team owns the issue.
- Verify Redash instance accessibility and criticality.
- Plan remediation based on exposure and risk.
