Budibase vulnerabilities
91 CVEs and advisories name Budibase as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-103757Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
- CVE-2026-100688Budibase server before 3.45.0 Cross-Tenant Information Disclosure
- CVE-2026-100687Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast
- CVE-2026-100686Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
- CVE-2026-100685Budibase before 3.45.0 Information Disclosure via Chat Links
- CVE-2026-100684Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC
- CVE-2026-100683Budibase before 3.45.0 SQL Injection via column-rename DDL
- CVE-2026-100682Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink
- CVE-2026-100681Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook
- CVE-2026-100680Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import
- CVE-2026-82246Budibase Server before 3.41.3 SSRF via Query Import
- CVE-2026-82245Budibase before 3.41.3 Missing Authorization License Management
- CVE-2026-82244Budibase before 3.41.3 Remote Code Execution via Plugin eval()
- CVE-2026-82243Budibase Server before 3.41.3 SSRF with Credential Leakage
- CVE-2026-82242Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization
- CVE-2026-82241Budibase backend-core SSRF via incomplete default blacklist
- CVE-2026-82240Budibase before 3.41.3 Privilege Escalation via User Update API
- CVE-2026-82239Budibase before 3.41.3 Authorization Bypass via datasources/query
- CVE-2026-54356Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
- CVE-2026-35219Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
- CVE-2026-73410Budibase: SSRF via DNS rebinding in the REST datasource integration
- CVE-2026-64657Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
- CVE-2026-72859Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
- CVE-2026-73305Budibase: Privilege escalation via public role assignment API missing app-level authorization
- CVE-2026-73304Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
- CVE-2026-73408Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector
- CVE-2026-73302Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified
- CVE-2026-72857Budibase before 3.40.0 Credential Exposure via STRING Fields
- CVE-2026-72856Budibase before 3.40.0 Authentication Bypass via Tenant Owner Email
- CVE-2026-72855Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST