CVE-2026-82245

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.41.3

Description Insufficient role-based authorization on license management endpoints allows any authenticated user to delete license keys or manipulate offline tokens. Users with basic privileges can access the /api/global/license/* endpoints to disable premium features and downgrade deployments for all users.

Recommendations Update to version 3.41.3 or later. Restrict access to the /api/global/license/* endpoints as a temporary mitigation measure.