Skip to content
OpenAdvisories

Vendor

apitable

5 known vulnerabilities.

Products

apitable 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111344

    APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description

    APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips sp…

    apitable apitable
  • Medium 4.3
    CVE-2026-86120

    APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard

    APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups throw exceptions. Attackers with valid Fusion API tokens can write attachments to p…

    apitable apitable
  • Medium 5.3
    CVE-2026-80207

    APITable through 1.13.0-beta.1 Missing Authentication on the Internal Notification Create Endpoint

    APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the pro…

    apitable apitable