Skip to content
OpenAdvisories
High WID-SEC-2026-2849 5 CVEs

Budibase: Mehrere Schwachstellen

Published Aug 13, 2026 · Updated Aug 30, 2026 · Revision 3 · de-DE

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um Dateien zu manipulieren, vertrauliche Daten offenzulegen, erweiterte Berechtigungen zu erlangen und Sicherheitsmaßnahmen zu umgehen.

Product

Budibase ist eine quelloffene Low-Code-Plattform für die Erstellung interner Anwendungen, wie z. B. Verwaltungspanels.

Vulnerabilities 5

  • High 8.1
    CVE-2026-82239

    Budibase before 3.41.3 Authorization Bypass via datasources/query

    Budibase before 3.41.3 fails to enforce per-table role restrictions on the POST /api/datasources/query endpoint, allowing low-privilege BASIC users to read, create, update, or delete rows in any table regardless of configured permissions. Attackers with BASIC…

    Budibase server
  • High 8.1
    CVE-2026-82240

    Budibase before 3.41.3 Privilege Escalation via User Update API

    Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the u…

    Budibase server
  • High 7.6
    CVE-2026-82243

    Budibase Server before 3.41.3 SSRF with Credential Leakage

    Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credenti…

    Budibase server
  • High 7.1
    CVE-2026-35219

    Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

    Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/aut…

    Budibase budibase @budibase/server npm
  • High 7.1
    CVE-2026-54356 Public exploit

    Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`

    Budibase is an open-source low-code platform. Prior to 3.41.3, POST /api/attachments/:datasourceId/url in packages/server/src/api/routes/static.ts and packages/server/src/api/controllers/static/index.ts allows an authenticated published-app user with the BASI…

    Budibase budibase @budibase/server npm

Revision history

  1. #3

    CVE's ergänzt

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-60382, EUVD-2026-60381

  3. #1

    Initiale Fassung

References