Skip to content
OpenAdvisories
High WID-SEC-2026-1806 3 CVEs

Budibase: Mehrere Schwachstellen

Published Jun 4, 2026 · Updated Jun 28, 2026 · Revision 3 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.

Product

Budibase ist eine quelloffene Low-Code-Plattform für die Erstellung interner Anwendungen, wie z. B. Verwaltungspanels.

Vulnerabilities 3

  • Critical 9.6
    CVE-2026-54352

    Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload

    Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with extract-zip@2.0.1 into a temp directory, then for each entry listed in …

    Budibase budibase @budibase/server npm
  • High 8.5
    CVE-2026-54353

    Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation

    Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before the request is…

    Budibase budibase @budibase/backend-core npm
  • High 8.2
    CVE-2026-54351

    Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override

    Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into automation execution parameters. A mass assignment vulnerability in externalTrigger() all…

    Budibase budibase @budibase/server npm

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-39910, EUVD-2026-39915, EUVD-2026-39916

  2. #2

    CVE ergänzt

  3. #1

    Initiale Fassung

References