Tag

Cve-2026-100686

1 brief RSS

Arbitrary File Read in Budibase OpenAPI Import Validator

Budibase versions prior to 3.45.0 contain an arbitrary file read vulnerability caused by enabled external JSON reference resolution during OpenAPI/Swagger file imports.

Budibase +1 vulnerability web-application data-exfiltration sql-injection cve authentication-bypass sso identity-management +5

7t 1c 7m ago