EUVD-2026-68410
GHSA-vhf9-px93-5p48
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privilege ToolJet account
-
DeliveryObserve or enumerate valid organizationId values
-
ExploitCraft TooljetDB API requests with manipulated organizationId
-
ExecutionBypass workspace authorization check
-
ImpactEnumerate, modify, or delete tables in victim workspace
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a valid authenticated ToolJet session with at minimum low-privilege access (any user account suffices; no admin role is needed). The attacker must also have network-adjacent access to the ToolJet instance - AV:A precludes exploitation from arbitrary internet hosts without routing to the API. The vulnerability is most impactful in multi-tenant or multi-workspace deployments where different organizations share a ToolJet instance; single-workspace deployments face negligible cross-tenant risk. No special feature enablement beyond standard TooljetDB usage is required. Exploitation is bounded by: (1) the network adjacency constraint, (2) possession of a valid account, and (3) the need to know or enumerate valid organizationId values for target workspaces. |
| Impact | The CVSS 4.0 vector AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L yields a score of 5.1 (Medium). The Adjacent network attack vector is the primary risk limiter - exploitation cannot originate from arbitrary internet hosts without network routing to the ToolJet API. Low privileges (PR:L) confirm that any authenticated ToolJet account is a viable attacker origin; no elevated role is needed. The impact triad VC:L/VI:L/VA:L reflects realistic cross-tenant harm: schema enumeration exposes business-sensitive table names, while create/rename/delete operations degrade data integrity and availability across victim workspaces. Risk is materially higher in multi-tenant or SaaS-style ToolJet deployments where workspace isolation is the primary trust boundary. EPSS data was not provided; absence of KEV listing and no known POC suggest this is not currently being exploited at scale. |
| Exploit ScenarioDerived | An authenticated ToolJet user in Workspace A inspects API traffic using browser developer tools, identifies the organizationId path parameter pattern in TooljetDB requests, and substitutes the ID of Workspace B - obtained by guessing, enumerating, or observing prior API responses. The attacker then issues requests to list all tables in Workspace B, exfiltrating schema metadata, and subsequently deletes tables to sabotage business operations in the victim workspace. No public POC exists at time of analysis, but the technique requires only standard HTTP request manipulation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAI
Authorization bypass in ToolJet before v3.16.208 permits any authenticated user to enumerate, create, rename, and delete TooljetDB tables belonging to arbitrary workspaces by supplying a foreign organizationId in the URL path of affected API endpoints. The TooljetDB controller accepts organizationId from the request path without validating it against the requesting user's actual workspace context, completely breaking tenant isolation in multi-workspace deployments. No public exploit code and no CISA KEV listing exist at time of analysis, but the flaw is trivially exploitable by any authenticated user with network access to the instance.
RemediationAI
Upgrade ToolJet to v3.16.208 or later, which resolves the flaw by enforcing server-side validation that the organizationId in each TooljetDB request matches the authenticated user's assigned workspace. The vendor advisory at https://github.com/ToolJet/ToolJet/security/advisories/GHSA-cx42-x23w-vhvf should be referenced for upgrade guidance. If immediate patching is not feasible, restrict network access to the ToolJet instance to trusted internal segments only, reducing the adjacent-network exposure window - note this does not eliminate risk from already-authenticated insider threats. In multi-tenant deployments where workspace isolation is a contractual or compliance requirement, consider temporarily disabling TooljetDB access until the patch is applied, accepting the loss of embedded database functionality as a trade-off for tenant separation.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
ToolJet is an open-source low-code platform for building internal business tools. Its embedded TooljetDB component provides a managed, PostgreSQL-backed database layer accessible through REST controller endpoints scoped by organizationId URL path parameters. CWE-863 (Incorrect Authorization) identifies the root cause: authorization logic exists but fails to cross-check the caller-supplied organizationId against the workspace actually bound to the authenticated session - a pattern classified as Broken Object Level Authorization (BOLA) or Insecure Direct Object Reference (IDOR). The CPE string cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:* covers all ToolJet releases prior to v3.16.208 across platforms.
Know when Tooljet gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Adjacent vector and low privileges per CVSS 4.0 input; no scope change as impact is confined to TooljetDB table operations within the application.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without verifying it matches the authenticated user's workspace. Authenticated users can enumerate, create, rename, and delete TooljetDB tables in any other workspace by manipulating the organizationId parameter in requests.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that w
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0. Rated high severity (CVSS 8.8), this vuln
ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . Ra
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0. Rated high severity (CVSS 8.0), this vul
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Rated high severity (CVSS
Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile
A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML v
Stored code injection in ToolJet self-hosted (prior to 3.20.178-lts) lets any authenticated builder-role user - availabl
ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside t
Just like in the previous report, an attacker could steal the account of different users. Rated medium severity (CVSS 4.
CI/CD pipeline injection in ToolJet's GitHub Actions render-preview deployment workflow (versions prior to 3.20.180) all
Exploit-DB