Skip to content
Threat Feed

Vendor

Budibase

6 briefs RSS
high advisory

Budibase Multiple Vulnerabilities

Multiple vulnerabilities in Budibase could be exploited by an attacker to gain administrative privileges, bypass security measures, perform cross-site scripting attacks, manipulate data, or disclose confidential information.

Budibase vulnerability privilege-escalation defense-evasion execution impact discovery cloud
2r 5t
high advisory

Budibase Stored XSS Vulnerability via Unrestricted File Upload (CVE-2026-46426)

Budibase is vulnerable to persistent stored XSS (CVE-2026-46426) due to unrestricted file upload of active content by authenticated users, leading to potential session cookie theft and account takeover.

budibase xss file-upload cve-2026-46426
2r 3t
high advisory

Budibase Builder-to-Admin Privilege Escalation via Unsecured onboardUsers Endpoint

A privilege escalation vulnerability exists in Budibase's `onboardUsers` endpoint (CVE-2026-45716) allowing a builder-level user to create global admin accounts by bypassing the intended invite flow when SMTP is not configured, due to insufficient authorization checks and direct user creation with attacker-controlled roles.

@budibase/worker privilege-escalation web-application budibase
2r 1t
high advisory

Budibase Security Bypass Vulnerability

An authenticated remote attacker can exploit a vulnerability in Budibase to bypass security measures and manipulate data.

Budibase security-bypass data-manipulation
2r 1t
high advisory

Budibase REST Datasource SSRF via HTTP Redirect Bypass (CVE-2026-45715)

Budibase is vulnerable to server-side request forgery (SSRF) via HTTP redirects in the REST datasource integration, allowing authenticated Builders to bypass IP blacklists and access internal services.

@budibase/server +1 ssrf budibase cve-2026-45715
2r 1t 3i
high advisory

Budibase XSS Leads to Account Takeover via JWT Theft

The `budibase:auth` cookie in Budibase is set without the `httpOnly` flag, enabling attackers with XSS to steal JWTs and gain persistent access to user accounts.

Budibase xss account takeover jwt cookie
2r 1t