Vishaallkumaarr

**Name of the Vulnerable Software and Affected Versions** Budibase versions 3.37.2 through 3.38.x **Description** Budibase contains an issue where the `GET /api/chat-links/:instance/:token/handoff` endpoint is public and lacks authentication and Cross-Site Request Forgery (CSRF) protection. This allows an attacker to create a session token containing their own `externalUserId` and trick an authenticated user into visiting the URL. When the victim visits the link, their Budibase account is silently and permanently linked to the attacker's external chat identity (such as Slack, Discord, or MS Teams) without any consent UI. Consequently, the attacker can impersonate the victim to interact with AI agents, potentially gaining unauthorized access to sensitive data, reading table rows, and triggering automations with the victim's permissions. **Recommendations** Update Budibase to version 3.39.0. As a temporary mitigation, restrict access to the `GET /api/chat-links/:instance/:token/handoff` endpoint.