Tooljet
Monthly
Authorization bypass in ToolJet before v3.16.208 permits any authenticated user to enumerate, create, rename, and delete TooljetDB tables belonging to arbitrary workspaces by supplying a foreign organizationId in the URL path of affected API endpoints. The TooljetDB controller accepts organizationId from the request path without validating it against the requesting user's actual workspace context, completely breaking tenant isolation in multi-workspace deployments. No public exploit code and no CISA KEV listing exist at time of analysis, but the flaw is trivially exploitable by any authenticated user with network access to the instance.
Cross-tenant authorization bypass in ToolJet before v3.16.208 allows any authenticated Builder-role user to access and manipulate database tables belonging to unrelated organizations by supplying arbitrary organizationId values in tooljet-db API path parameters. Server-side validation of tenant membership is entirely absent on schema operation endpoints, enabling an attacker to enumerate target organization IDs from public app endpoints and then disclose table schemas, plant rogue tables, corrupt existing schemas, or permanently destroy data across tenant boundaries. No public exploit has been identified at time of analysis, but the underlying IDOR technique is trivially reproducible using standard HTTP tooling.
Cross-workspace authorization bypass in ToolJet through 3.0.0-ee-beta.2 exposes TooljetDB table schemas and restricted app definitions to authenticated low-privilege users via the POST /api/v2/resources/export endpoint. Authenticated users can supply an arbitrary organization_id in the request body to extract database schemas belonging to workspaces they are not members of, and can additionally sidestep per-app granular export permissions within their own workspace to retrieve restricted app definitions. No public exploit code or CISA KEV listing exists at time of analysis; exploitation requires valid credentials.
Cross-workspace authorization bypass in ToolJet before v3.16.208 allows workspace administrators to create, enumerate, and delete database tables belonging to workspaces they do not own. The server-side table-management API accepts an organizationId path parameter without validating it against the authenticated session's workspace scope, enabling any workspace admin to target arbitrary tenants by substituting organizationId values in API requests. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the attack technique is straightforward for any attacker already holding workspace admin credentials.
Cross-organization data exposure in ToolJet before v3.16.208 allows any authenticated user to read table schemas and row data belonging to other tenant organizations by supplying arbitrary organization IDs in URL parameters to database read routes. The flaw represents a complete collapse of multi-tenant isolation: attackers can enumerate tables, retrieve column definitions, and execute join queries against victim organization data without triggering any authorization error. No public exploit has been identified at time of analysis, but exploitation requires nothing beyond a valid user account and knowledge of basic HTTP request manipulation.
Cross-tenant database manipulation in ToolJet before v3.16.208 exposes all organizations on shared instances to unauthorized DDL and DML operations by any builder-role user in a co-tenant organization. The database write and destroy API routes accept a user-supplied organizationId without server-side ownership verification, enabling permanent table deletion, arbitrary data insertion, and schema alteration across organizational boundaries. No public exploit has been identified at time of analysis, and exploitation requires a valid builder-role account and knowledge of a target organizationId, limiting opportunistic risk while remaining severe for multi-tenant deployments.
Cross-workspace privilege escalation in ToolJet Database before v3.16.44 enables any authenticated user to read database tables belonging to arbitrary workspaces by supplying victim workspace identifiers in the join_tables endpoint request path. The endpoint grants JOIN_TABLES capability to all authenticated users without validating role membership or workspace affiliation, breaking ToolJet's multi-tenant isolation entirely. No public exploit or CISA KEV listing has been identified, but the CVSS 4.0 score of 8.2 reflects high confidentiality impact across both the vulnerable and subsequent systems in shared deployments.
Cross-tenant authorization bypass in ToolJet's Database HTTP API allows authenticated users of any workspace to access and manipulate database tables belonging to other organizations by substituting a victim's organizationId into the URL path. All ToolJet installations prior to version 3.20.207-lts running multi-tenant configurations with the ToolJet Database feature enabled are affected. An attacker holding a valid account on any workspace can enumerate foreign table schemas, extract row data, and perform destructive operations including table creation, alteration, bulk population, and deletion across organizational boundaries. No public exploit has been identified at time of analysis.
CI/CD pipeline injection in ToolJet's GitHub Actions render-preview deployment workflow (versions prior to 3.20.180) allows any GitHub user who can comment on an open pull request to execute arbitrary shell commands on the CI runner and exfiltrate deployment secrets. The root cause is direct interpolation of `github.event.comment.body` - a fully attacker-controlled input - into a bash conditional `run:` step without sanitization. A proof-of-concept has been documented (SSVC: poc), the vendor has released a fix in 3.20.180, and the attack is not listed in CISA KEV at time of analysis.
Cross-tenant credential decryption in ToolJet prior to 3.20.1780-lts allows any authenticated user to retrieve plaintext data-source secrets belonging to any other organization on the same instance. The POST /api/data-sources/decrypt endpoint omits the ValidateDataSourceGuard present on all neighboring routes and performs no organization-scoped lookup, meaning a valid session from any tenant is sufficient to exfiltrate database passwords, API keys, and other stored secrets across tenant boundaries. No public exploit has been identified at time of analysis, but the attack is mechanically trivial for any user with a valid account and knowledge of a target credential_id.
Server-side request forgery in ToolJet's RestAPI data source (versions prior to 3.20.178-lts) allows a low-privileged platform user to reach internal network endpoints because the private-IP filter validates only the hostname string rather than the resolved IP. By supplying a DNS name such as 169.254.169.254.nip.io, an attacker bypasses the filter and forces the server to query the Azure IMDS link-local endpoint, enabling theft of managed-identity tokens for the backing AKS production cluster. No public exploit identified at time of analysis and the issue is not in CISA KEV, but the cloud-credential impact makes it a high-value SSRF.
Stored code injection in ToolJet self-hosted (prior to 3.20.178-lts) lets any authenticated builder-role user - available on the free tier - overwrite a globally-shared marketplace plugin with arbitrary JavaScript that runs server-side with full Node.js capabilities (require, process). Because the poisoned plugin executes whenever any user on the instance runs a query that uses it, a single low-privileged account achieves remote code execution and an instance-wide supply-chain compromise. The flaw carries a CVSS 4.0 score of 9.4; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Just like in the previous report, an attacker could steal the account of different users. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Authorization bypass in ToolJet before v3.16.208 permits any authenticated user to enumerate, create, rename, and delete TooljetDB tables belonging to arbitrary workspaces by supplying a foreign organizationId in the URL path of affected API endpoints. The TooljetDB controller accepts organizationId from the request path without validating it against the requesting user's actual workspace context, completely breaking tenant isolation in multi-workspace deployments. No public exploit code and no CISA KEV listing exist at time of analysis, but the flaw is trivially exploitable by any authenticated user with network access to the instance.
Cross-tenant authorization bypass in ToolJet before v3.16.208 allows any authenticated Builder-role user to access and manipulate database tables belonging to unrelated organizations by supplying arbitrary organizationId values in tooljet-db API path parameters. Server-side validation of tenant membership is entirely absent on schema operation endpoints, enabling an attacker to enumerate target organization IDs from public app endpoints and then disclose table schemas, plant rogue tables, corrupt existing schemas, or permanently destroy data across tenant boundaries. No public exploit has been identified at time of analysis, but the underlying IDOR technique is trivially reproducible using standard HTTP tooling.
Cross-workspace authorization bypass in ToolJet through 3.0.0-ee-beta.2 exposes TooljetDB table schemas and restricted app definitions to authenticated low-privilege users via the POST /api/v2/resources/export endpoint. Authenticated users can supply an arbitrary organization_id in the request body to extract database schemas belonging to workspaces they are not members of, and can additionally sidestep per-app granular export permissions within their own workspace to retrieve restricted app definitions. No public exploit code or CISA KEV listing exists at time of analysis; exploitation requires valid credentials.
Cross-workspace authorization bypass in ToolJet before v3.16.208 allows workspace administrators to create, enumerate, and delete database tables belonging to workspaces they do not own. The server-side table-management API accepts an organizationId path parameter without validating it against the authenticated session's workspace scope, enabling any workspace admin to target arbitrary tenants by substituting organizationId values in API requests. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the attack technique is straightforward for any attacker already holding workspace admin credentials.
Cross-organization data exposure in ToolJet before v3.16.208 allows any authenticated user to read table schemas and row data belonging to other tenant organizations by supplying arbitrary organization IDs in URL parameters to database read routes. The flaw represents a complete collapse of multi-tenant isolation: attackers can enumerate tables, retrieve column definitions, and execute join queries against victim organization data without triggering any authorization error. No public exploit has been identified at time of analysis, but exploitation requires nothing beyond a valid user account and knowledge of basic HTTP request manipulation.
Cross-tenant database manipulation in ToolJet before v3.16.208 exposes all organizations on shared instances to unauthorized DDL and DML operations by any builder-role user in a co-tenant organization. The database write and destroy API routes accept a user-supplied organizationId without server-side ownership verification, enabling permanent table deletion, arbitrary data insertion, and schema alteration across organizational boundaries. No public exploit has been identified at time of analysis, and exploitation requires a valid builder-role account and knowledge of a target organizationId, limiting opportunistic risk while remaining severe for multi-tenant deployments.
Cross-workspace privilege escalation in ToolJet Database before v3.16.44 enables any authenticated user to read database tables belonging to arbitrary workspaces by supplying victim workspace identifiers in the join_tables endpoint request path. The endpoint grants JOIN_TABLES capability to all authenticated users without validating role membership or workspace affiliation, breaking ToolJet's multi-tenant isolation entirely. No public exploit or CISA KEV listing has been identified, but the CVSS 4.0 score of 8.2 reflects high confidentiality impact across both the vulnerable and subsequent systems in shared deployments.
Cross-tenant authorization bypass in ToolJet's Database HTTP API allows authenticated users of any workspace to access and manipulate database tables belonging to other organizations by substituting a victim's organizationId into the URL path. All ToolJet installations prior to version 3.20.207-lts running multi-tenant configurations with the ToolJet Database feature enabled are affected. An attacker holding a valid account on any workspace can enumerate foreign table schemas, extract row data, and perform destructive operations including table creation, alteration, bulk population, and deletion across organizational boundaries. No public exploit has been identified at time of analysis.
CI/CD pipeline injection in ToolJet's GitHub Actions render-preview deployment workflow (versions prior to 3.20.180) allows any GitHub user who can comment on an open pull request to execute arbitrary shell commands on the CI runner and exfiltrate deployment secrets. The root cause is direct interpolation of `github.event.comment.body` - a fully attacker-controlled input - into a bash conditional `run:` step without sanitization. A proof-of-concept has been documented (SSVC: poc), the vendor has released a fix in 3.20.180, and the attack is not listed in CISA KEV at time of analysis.
Cross-tenant credential decryption in ToolJet prior to 3.20.1780-lts allows any authenticated user to retrieve plaintext data-source secrets belonging to any other organization on the same instance. The POST /api/data-sources/decrypt endpoint omits the ValidateDataSourceGuard present on all neighboring routes and performs no organization-scoped lookup, meaning a valid session from any tenant is sufficient to exfiltrate database passwords, API keys, and other stored secrets across tenant boundaries. No public exploit has been identified at time of analysis, but the attack is mechanically trivial for any user with a valid account and knowledge of a target credential_id.
Server-side request forgery in ToolJet's RestAPI data source (versions prior to 3.20.178-lts) allows a low-privileged platform user to reach internal network endpoints because the private-IP filter validates only the hostname string rather than the resolved IP. By supplying a DNS name such as 169.254.169.254.nip.io, an attacker bypasses the filter and forces the server to query the Azure IMDS link-local endpoint, enabling theft of managed-identity tokens for the backing AKS production cluster. No public exploit identified at time of analysis and the issue is not in CISA KEV, but the cloud-credential impact makes it a high-value SSRF.
Stored code injection in ToolJet self-hosted (prior to 3.20.178-lts) lets any authenticated builder-role user - available on the free tier - overwrite a globally-shared marketplace plugin with arbitrary JavaScript that runs server-side with full Node.js capabilities (require, process). Because the poisoned plugin executes whenever any user on the instance runs a query that uses it, a single low-privileged account achieves remote code execution and an instance-wide supply-chain compromise. The flaw carries a CVSS 4.0 score of 9.4; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Just like in the previous report, an attacker could steal the account of different users. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.