CVE-2026-49360 is an external control of file name or path vulnerability (CWE-73) in the DataRecce recce tool prior to version 1.50.0. The vulnerability arises when the OSS server is exposed to untrusted networks without authentication, allowing unauthenticated SQL execution through the query run API. Specifically, when Recce is configured with a DuckDB-backed project, an attacker can leverage DuckDB filesystem primitives to read and write files accessible to the Recce server process. This can lead to disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files causing stored XSS, and modification of application files if writable. If Recce runs as root, these file operations occur with root privileges. The issue is fixed in Recce version 1.50.0 by restricting unsafe file read/write behavior and hardening the query path. Other warehouse adapters have been reviewed for similar issues.

The impact includes unauthorized disclosure of local files, modification of Recce or dbt artifacts, potential stored cross-site scripting via altered static files, and modification of application files if writable. If the Recce server runs with root privileges, the attacker gains root-level file access on the host or container. This can compromise confidentiality, integrity, and availability of the affected system and data.

A fix is available in Recce version 1.50.0 and later. Users should upgrade to this version to remediate the vulnerability. For those unable to upgrade immediately, it is recommended to avoid exposing the Recce server to untrusted networks or the public internet. Additional mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy or VPN, running Recce as a non-root user, using a read-only filesystem for the application where possible, and ensuring sensitive files or credentials are not accessible to the Recce process.