Retool vulnerabilities

Products

• Retool 3

Newest

• retool Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying CVE-2024-58394 5.1 MediumOctober 22, 2026
• retool Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN... CVE-2025-47424 7.1 HighMay 9, 2025
• retool Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into... CVE-2024-42056 6.5 MediumAugust 22, 2024