Data exposure via incorrect frontend classification

Classification error in Palantir Gotham allows remote attackers to expose data by misclassifying a newly created property or link. The Gotham frontend assigns the wrong classification when it creates a property or link; Palantir has not disclosed the responsible code path or triggering circumstances. Exploitation is network-based and unauthenticated but requires user interaction, and the vendor assessment limits the consequence to confidentiality loss.