Dongyanglyu

**Name of the Vulnerable Software and Affected Versions** Actual versions prior to 26.7.0 **Description** A missing authorization issue allows a shared user with `user access` on a budget file to perform file management actions reserved for the owner or an administrator. This occurs because the `requireFileAccess()` function incorrectly treats standard shared access as sufficient for high-privilege operations. An attacker can exploit this by calling the following API endpoints: '/delete-user-file', '/reset-user-file', and '/user-create-key'. **Recommendations** Update to version 26.7.0.

**Name of the Vulnerable Software and Affected Versions** NocoDB versions prior to 2026.05.1 **Description** A user in one workspace can exercise another workspace's integration by supplying its ID to the 'testConnection' endpoint. This occurs because the integration is fetched in a bypass scope, and the permission check only verifies if the caller holds an owner or creator role on any base in any workspace, rather than restricting the check to the specific workspace of the integration. This allows cross-tenant access to integration configurations and the ability to operate the resolved database using another workspace's credentials. **Recommendations** Update to version 2026.05.1.