CVE-2025-12414— Looker account compromise via punycode homograph attack
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-12414
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Looker account compromise via punycode homograph attack
Source: NVD (National Vulnerability Database)
Vulnerability Description
An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted. The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ : * 24.12.100+ * 24.18.193+ * 25.0.69+ * 25.6.57+ * 25.8.39+ * 25.10.22+ * 25.12.0+
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用欺骗进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Looker 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Looker是美国谷歌（Google）公司的一个智能商业平台。 Google Looker存在安全漏洞，该漏洞源于电子邮件地址字符串规范化不当，可能导致账户接管。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Google Cloud | Looker | 0 ~ 24.12.100 | - | |
| Google Cloud | Looker | 0 ~ 24.12.100 | - |
II. Public POCs for CVE-2025-12414
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-12414
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Looker
- CVE-2025-12742
Remote Code Execution in Looker via Teradata JDBC Driver - CVE-2025-12741
Arbitrary File Write in Denodo dialect of Looker allows Remo - CVE-2025-12740
Remote Command Execution in Looker via IBM DB2 JDBC drive - CVE-2025-12739
Cross-Site Scripting (XSS) in Looker's Extension Loader lead - CVE-2025-12743
SQL Injection in Looker Project Generation Endpoint Allows A
Same vendor: Google Cloud
- CVE-2026-3259
Sensitive Data Disclosure in BigQuery via Materialized View - CVE-2026-4810
Remote Code Execution in Google Agent Development Kit (ADK) - CVE-2026-3136
Google Cloud Build Comment Control Bypass - CVE-2026-2244
Sensitive Data Exposure in Google Cloud Vertex AI Workbench - CVE-2026-2473
Bucket Squatting in Vertex AI Experiments leads to RCE and M
Same weakness: CWE-290
- CVE-2021-47923
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie - CVE-2026-42354
Sentry: Improper authentication on SAML SSO process allows u - CVE-2026-44118
OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Tok - CVE-2026-39858
Traefik: Forwarded alias spoofing top pre-auth decision bypa - CVE-2018-25318
Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Cha
V. Comments for CVE-2025-12414
No comments yet