Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

## Summary Budibase attaches a REST datasource's stored credentials (Bearer/Basic tokens and static headers) to an outgo

历史摘要 · 未重新核验 · GitHub Advisory

Cloudreve WOPI view sessions can write files and WOPI access token secret is ignored

CVE-2026-62323

## Summary Cloudreve WOPI access tokens are generated as `.`, but the WOPI middleware validates only the session id pre

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified

### Summary Budibase's OIDC SSO login links an incoming SSO identity to an existing Budibase account **by email address

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: DNS rebinding SSRF bypasses remain in OpenAPI import and REST query execution

## Impact A builder-level user can make Budibase issue server-side HTTP requests to loopback or private-network targets

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: S3 presigned URL endpoint authorization regression in v3.39.4 allows BASIC users to obtain S3 PutObject presigned URLs

## Impact In Budibase v3.39.4, a regression in the authorization level for the S3 attachment upload endpoint allows any

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile

## Summary When creating a MongoDB datasource, Budibase passes the `tlsCertificateKeyFile` and `tlsCAFile` fields straig

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SQL Injection via `multipleStatements: true`

## Summary A critical SQL injection vulnerability was discovered in Budibase's MySQL integration that allows remote atta

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)

## Summary `POST /api/v2/email` on the account portal (`account.budibase.app`) starts an email-change workflow using a

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

## Summary The `/api/users/metadata` and `/api/users/metadata/:id` endpoints in `@budibase/server` return full global u

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings

## Summary The `GET /api/global/groups` endpoint on the worker service has no role-based authorization middleware. Any

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Privilege escalation via public role assignment API missing app-level authorization

### Summary Budibase `3.39.19` (commit `03fbabae4`) is affected by a privilege-escalation / missing-authorization flaw

历史摘要 · 未重新核验 · GitHub Advisory

react-server-dom: Denial of Service in Server Functions

CVE-2026-44907

### Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server fu

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

CVE-2026-62379

## Summary A pre-authentication remote code execution vulnerability affects OpenAM. The remote authentication endpoint (

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

CVE-2026-62280

### Description The OAuth2/OIDC consent page rendered for `display=wap` authorize requests reflected several request-der

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass

CVE-2026-62263

### Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter` meant t

历史摘要 · 未重新核验 · GitHub Advisory

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

CVE-2026-59221

AI assistance was used to help inspect the code and prepare this report. ## Summary The fix for GHSA-r2wg-2mcr-66rv is

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Arena task endpoints can bypass underlying model access controls

CVE-2026-59225

## Summary An authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

CVE-2026-59212

## Summary Current `main` and `v0.9.6` still allow an authenticated user to turn read-only access to another user's fil

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)

CVE-2026-59224

## Summary The terminal proxy in `backend/open_webui/routers/terminals.py` forwards the Open WebUI user's identity to t

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

CVE-2026-59223

## Summary The administrator-configured `WEB_FETCH_FILTER_LIST` (the allow/block list applied to server-side web fetche

历史摘要 · 未重新核验 · GitHub Advisory