ToolJet: Authentication bypass vulnerability (CVE-2026-126795)
A vulnerability in the ToolJet Onboarding Signup Endpoint allows for potential remote authentication bypass via manipulation of the email argument.
CVE search metadata
CVE search record: CVE-2026-126795. Severity: high. CVSS: 7.3. KEV: no. Product: ToolJet up to 3.20.256-lts/3.21.93-beta. Brief: ToolJet: Authentication bypass vulnerability (CVE-2026-126795). Brief link: https://feed.craftedsignal.io/briefs/2026-11-tooljet-auth-bypass-cve-2026-126795/
Triage facts
Revision 1- Applicability
- ToolJet up to 3.20.256-lts/3.21.93-beta
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 04:02 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-126795 has been identified in the ToolJet component Onboarding Signup Endpoint. The vulnerability exists within the activateUserWithPassword function in the file server/src/modules/onboarding/util.service.ts. Remote attackers can exploit this vulnerability through manipulation of the email argument, potentially resulting in missing authentication. The vulnerability has been publicly disclosed.
Recommendation
Upgrade to ToolJet version 3.21.94-beta to resolve this issue.