Read the docs
TI-2022-10777 Aliases CVE-2022-27897GHSA-fcgx-8f7g-hw7g

Palantir Gotham included an endpoint that would log arbitrary sized zip files.

Priority MEDIUM 40CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00616 49th percentileScored 2026-11-07
Fix Fixed Gotham (Palantir): 3.22.11.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PalantirGothambefore 3.22.11.23.22.11.2Patch availableCNA
  • Gotham VendorPalantir Affected before 3.22.11.2 Fixed in 3.22.11.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:palantir:gotham:*:*:*:*:*:*:*:*before 3.22.11.2VulnerablePalantir
  • cpe:2.3:o:palantir:gotham:*:*:*:*:*:*:*:* Versions before 3.22.11.2 Vulnerable ·Palantir

Remediation

  • Fix · CNA Gotham (Palantir) Fixed in 3.22.11.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Palantir Gotham 3.22.11.2

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2022-10772 Palantir Gotham included an endpoint that would log arbitrary sized payloads.Priority MEDIUM 40
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-27897
  2. 2026-10-03 Alias added: GHSA-fcgx-8f7g-hw7g

References

Advisory 1

  • TI-2022-10772 Palantir Gotham included an endpoint that would log arbitrary sized payloads. CVSS 3.1HIGH 7.5
  • TI-2022-10771 Information disclosure in Palantir Gotham CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences