An improper privilege management vulnerability (CVE-2025-12405) was discovered in Looker Studio affecting all JDBC-based connectors. A user with report view access could copy a report and execute arbitrary SQL on the data source database using stored credentials attached to the report. This vulnerability was patched on July 21, 2025, and no customer action is required.