Skip to content
OpenAdvisories
High WID-SEC-2026-1477 4 CVEs

Budibase: Mehrere Schwachstellen

Published May 11, 2026 · Updated May 27, 2026 · Revision 4 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Code auszuführen oder seine Rechte zu erweitern.

Product

Budibase ist eine quelloffene Low-Code-Plattform für die Erstellung interner Anwendungen, wie z. B. Verwaltungspanels.

Vulnerabilities 4

  • High 8.8
    CVE-2026-45716

    Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

    Budibase is an open-source low-code platform. Prior to 3.38.1, the POST /api/global/users/onboard endpoint is protected by workspaceBuilderOrAdmin middleware, allowing any user with builder permissions to access it. When SMTP email is not configured (the defa…

    Budibase budibase @budibase/worker npm
  • High 7.7
    CVE-2026-45715

    Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

    Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal service…

    Budibase budibase @budibase/server npm
  • Medium 6.5
    CVE-2026-45719

    Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API

    Budibase is an open-source low-code platform. Prior to 3.38.1, the V1 Views API (POST /api/views) accepts a calculation parameter from the request body that is interpolated directly into a CouchDB reduce function definition without validation. Although an int…

    Budibase budibase @budibase/server npm
  • Medium 5.4
    CVE-2026-45718

    Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows

    Budibase is an open-source low-code platform. Prior to 3.38.1, the row action trigger endpoint (POST /api/tables/:sourceId/actions/:actionId/trigger) fails to validate that the user-supplied rowId is within the scope of the view's row filters. A user with acc…

    Budibase budibase budibase npm

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-32602, EUVD-2026-32600, EUVD-2026-32599, EUVD-2026-32603

  2. #3

    CVE's ergänzt

  3. #2

    CVE ergänzt

  4. #1

    Initiale Fassung

References