CVE-2026-73409

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.40.1

Description In Budibase Cloud, the packages/server/src/integrations/mongodb.ts file passes builder-controlled tlsCertificateKeyFile and tlsCAFile values directly to the MongoClient. An attacker can submit absolute server paths through the '/api/datasources/verify' endpoint and distinguish between existing readable files and missing files by analyzing the driver error. This creates a filesystem existence and readability oracle, which is a mechanism that allows an attacker to confirm the presence and accessibility of files on the shared server.

Recommendations Update to version 3.40.1.