What is the CVSS score of CVE-2026-35218?

CVE-2026-35218 has a CVSS 3.1 base score of 8.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Budibase are affected by CVE-2026-35218?

Budibase versions prior to 3.32.5 contain a stored cross-site scripting vulnerability in the Builder Command Palette that allows authenticated users with Builder role to inject malicious code through…. A patch is available.

How to fix or mitigate CVE-2026-35218?

Within 24 hours: Identify all Budibase instances and confirm current version via administration console. Within 7 days: Upgrade all affected Budibase deployments to version 3.32.5 or later; coordinate testing in non-production environments first. Within 30 days: Audit Builder role accounts for suspicious entity names (tables, views, queries, automations) created in the past 90 days; review audit logs for Command Palette invocations by multiple Builder accounts to identify potential exploitation.

Budibase CVE-2026-35218

EUVD-2026-18797 HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-04-03 GitHub_M

XSS Budibase

8.7

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.7 HIGH

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:07 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

3.32.5

EUVD ID Assigned

Apr 03, 2026 - 16:00 euvd

EUVD-2026-18797

Analysis Generated

Apr 03, 2026 - 16:00 vuln.today

CVE Published

Apr 03, 2026 - 15:47 nvd

HIGH 8.7

DescriptionGitHub Advisory

Budibase is an open-source low-code platform. Prior to version 3.32.5, Budibase's Builder Command Palette renders entity names (tables, views, queries, automations) using Svelte's {@html} directive without any sanitization. An authenticated user with Builder access can create a table, automation, view, or query whose name contains an HTML payload (e.g. <img src=x onerror=alert(document.domain)>). When any Builder-role user in the same workspace opens the Command Palette (Ctrl+K), the payload executes in their browser, stealing their session cookie and enabling full account takeover. This issue has been patched in version 3.32.5.

AnalysisAI

Stored cross-site scripting (XSS) in Budibase's Builder Command Palette (versions prior to 3.32.5) enables authenticated Builder users to inject malicious HTML payloads via entity names (tables, views, queries, automations), achieving session hijacking and account takeover when other Builder-role users invoke the Command Palette. CVSS 8.7 with changed scope reflects the cross-user attack vector. No public exploit identified at time of analysis, though the attack technique is straightforward for authenticated insiders. EPSS data unavailable; patch available in version 3.32.5.

Technical ContextAI

Budibase is an open-source low-code application platform written in JavaScript/TypeScript, utilizing Svelte for frontend rendering. The vulnerability stems from unsafe use of Svelte's {@html} directive when rendering user-controlled entity names in the Builder Command Palette UI component. CWE-79 (Improper Neutralization of Input During Web Page Generation) occurs because the application fails to sanitize HTML metacharacters in entity names before rendering. When a malicious Builder creates an entity with an embedded script tag or event handler (e.g., <img src=x onerror=alert(document.domain)>), Svelte's {@html} directive interprets and executes the payload as live HTML/JavaScript rather than escaped text. The Command Palette, a keyboard-driven UI feature (Ctrl+K) that searches workspace entities, becomes the execution vector. Affected product per CPE: Budibase application (cpe:2.3:a:budibase:budibase) versions before 3.32.5, including all 3.x versions prior to the patch.

RemediationAI

Vendor-released patch: Upgrade to Budibase version 3.32.5 or later, available at https://github.com/Budibase/budibase/releases/tag/3.32.5. The fix implemented in commit c9ccf0c19e5849f1bda96401aa33f97c99cd8cd6 (https://github.com/Budibase/budibase/commit/c9ccf0c19e5849f1bda96401aa33f97c99cd8cd6) and pull request #18243 (https://github.com/Budibase/budibase/pull/18243) replaces unsafe {@html} rendering with proper HTML entity encoding in the Command Palette component. For self-hosted deployments, update container images or npm packages to 3.32.5+. For Budibase Cloud users, the vendor should auto-apply the patch. No effective workarounds exist short of restricting Builder role assignments to fully trusted users only, as the vulnerability is inherent to the rendering logic. Post-upgrade, review audit logs for suspicious entity names created before patching (entity names containing angle brackets, script tags, or JavaScript event handlers) and inspect Builder user sessions for anomalous activity indicative of prior exploitation.