Issue
On August 15, 2022, Tableau became aware of an issue affecting Tableau Server Administration Agent’s internal file transfer service.
As a result of this code error, unauthorized third parties could have potentially accessed the internal file transfer service and carried out a path traversal attack to perform remote code execution on Tableau Server hosts.
NOTE: In order to exploit this code error, a malicious actor would need to be able to access a customer’s system and write code targeting the impacted internal interface. Based on currently available information, Tableau does not have evidence of publicly available resources that would enable a path traversal attack.