EUVD-2026-90686
GHSA-2524-3r74-44wr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authenticated builder user (PR:L) over network with low complexity; SSRF crosses a trust boundary (S:C) to read internal/metadata secrets (C:H), with no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
5DescriptionCVE.org
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables that places an internal URL in an attachment column, causing the server to fetch it and return a presigned object-storage URL containing the response, such as cloud metadata credentials.
Articles & Coverage 1
AnalysisAI
Server-side request forgery in Budibase through 3.41.0 allows an authenticated builder-level user to make the server fetch arbitrary internal URLs and read the response back through the AI table generation endpoint (POST /api/ai/tables). The uploadUrl helper in packages/server/src/utilities/fileUtils.ts calls raw node-fetch instead of the project's fetchWithBlacklist wrapper, so a crafted prompt that places an internal address (for example the cloud metadata endpoint at 169.254.169.254) into an attachment column causes the server to retrieve that URL and surface the fetched content via a presigned object-storage URL - potentially exposing cloud instance credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated Budibase builder-level account and that the AI table generation feature (POST /api/ai/tables) be reachable; exploitation uses a prompt that places an internal/attacker-chosen URL into an attachment column, which the server fetches via the unguarded uploadUrl path. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a credible, well-substantiated SSRF rather than a high-CVSS-but-low-real-risk issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: upgrade Budibase to the vendor-released fixed build identified in GHSA-3c52-v5v2-3r56 (EUVD-2026-90686 lists the affected range as 0 <3.41.0, indicating 3.41.0 or later contains the fix, but verify the exact patched version against the advisory because the description text states 'through 3.41.0'). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Budibase instances and confirm whether any are running version 3.41.0 or earlier; restrict or disable the AI table generation endpoint (POST /api/ai/tables) for non-administrative users, audit builder accounts for unnecessary or dormant access, and monitor outbound requests to internal addresses such as 169.254.169.254. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could
FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was inc
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Rated critical severity (CVSS 9.8), this vulner
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary fi
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwin
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today