CVE-2026-73407

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.40.1

Description In the RestIntegration. req function within packages/server/src/integrations/rest.ts, credentials from getAuthHeaders and defaultHeaders are attached without verifying if the final request destination matches the datasource origin. An unauthenticated user can exploit this by sending a request to the PUBLIC POST '/api/v2/queries/:queryId' endpoint, providing an absolute or parameterized path to a host controlled by the attacker to retrieve stored bearer, basic, or static-header credentials.

Recommendations Update to version 3.40.1.