Skip to contentBudibase vulnerabilities
Newest
- budibaseBudibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentialsCVE-2026-50136Fix available7.4 High
- budibaseBudibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in BudibaseCVE-2026-50132Fix available7.3 High
- budibaseBudibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQLCVE-2026-64657Fix available8.4 High
- budibaseBudibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase WorkerCVE-2026-48147Fix available6.5 Medium
- budibaseBudibase: Unvalidated VectorDB Host Parameter Enables SSRFCVE-2026-48148Fix available5.3 Medium
- budibaseBudibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant usersCVE-2026-464259.9 Critical
- budibaseBudibase: Snowflake private key returned unmasked from datasource API to BASIC usersCVE-2026-464277.7 High
- budibaseBudibase: SSRF via User-Controlled queryId in Automation Execute Query StepCVE-2026-48128Fix available5.1 Medium
- budibaseBudibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist ProtectionCVE-2026-48146Fix available7.7 High
- budibaseBudibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypassCVE-2026-481498.1 High
- budibaseBudibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assignCVE-2026-48150Fix available9.0 Critical
- budibaseBudibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schemaCVE-2026-48151Fix available7.5 High
- budibaseBudibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URLCVE-2026-48152Fix available8.1 High
- budibaseBudibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadataCVE-2026-48153Fix available8.5 High
- budibaseBudibase: Unrestricted Upload of File with Dangerous TypeCVE-2026-46426Fix available7.6 High
- budibaseBudibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 HourCVE-2026-46424Fix available4.2 Medium
- budibaseBudibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views APICVE-2026-45719Fix available6.5 Medium
- budibaseBudibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope RowsCVE-2026-45718Fix available5.4 Medium
- budibaseBudibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP ConfigurationCVE-2026-45716Fix available8.8 High
- budibaseBudibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters…CVE-2026-45717Fix available8.8 High
- budibaseBudibase: SSRF Bypass via HTTP Redirect in REST Datasource IntegrationCVE-2026-45715Fix available7.7 High
- budibaseBudibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist ValidationCVE-2026-45548Fix available7.7 High
- budibaseBudibase: SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)CVE-2026-45061Fix available7.7 High
- budibaseBudibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeoverCVE-2026-42239Fix available8.1 High
- budibaseBudibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected EndpointsCVE-2026-414289.1 Critical
- budibaseBudibase: Stored XSS via unsanitized entity names rendered with {@html} in Builder Command PaletteCVE-2026-352188.7 High
- budibaseBudibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation StepCVE-2026-35216Fix availableEPSS 10.9%9.1 Critical
- budibaseBudibase: Path traversal in plugin file upload enables arbitrary directory deletion and file writeCVE-2026-35214Fix available8.7 High
- budibaseBudibase: Server-Side Request Forgery via REST Connector with Empty Default BlacklistCVE-2026-31818Fix available9.6 Critical
- budibaseBudibase: Command Injection in Bash Automation StepCVE-2026-25044Fix available8.7 High
- budibaseBudibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email FloodingCVE-2026-250435.3 Medium
- budibaseBudibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query PreviewCVE-2026-332268.7 High
- budibaseBudibase Universal Auth Bypass via Webhook Query Param InjectionCVE-2026-31816Public exploitEPSS 16.7%9.1 Critical
- budibaseBudibase PWA ZIP Upload Path Traversal Allows Reading Arbitrary Server Files Including All Environment SecretsCVE-2026-302409.6 Critical
- budibaseBudibase Critical Privilege Escalation & IDOR via Missing RBAC on User Role Management (Creator-Role)CVE-2026-250458.7 High
- budibaseBudibase Arbitrary File Upload Leading to Multiple Critical Vulnerabilities (SSRF, Stored XSS)CVE-2026-257378.9 High
- budibaseBudibase has a Command Injection in PostgreSQL Dump CommandCVE-2026-25041Fix available8.6 High
- budibaseBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)CVE-2026-27702Fix available9.9 Critical
- budibaseBudibase Vulnerable to Privilege Escalation via API Abuse – Creator Can Invite Users with Admin/Any RoleCVE-2026-250405.7 Medium
- budibaseBudiBase Server-Side Request Forgery vulnerabilityCVE-2023-290106.5 Medium
- budibase, budibase budibase/budibase +1 moreImproper Control of Dynamically-Managed Code Resources in budibase/budibaseCVE-2022-3225Fix available8.8 High