PT-2026-83751
CVE-2026-82874
·
Published
2026-08-31
·
Updated
2026-09-17
Description by
CVSS 4.0
9.4
CriticalMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
ToolJet versions prior to 3.16.208
Description
An issue exists where the software fails to validate if authenticated users belong to the organization specified in the
organizationId path parameter of tooljet-db endpoints. This allows any user with Builder privileges to read, modify, and delete tables across tenant boundaries. Attackers can obtain victim organization IDs from public app endpoints and then use schema operation endpoints to disclose table schemas, create malicious tables, corrupt existing schemas, or permanently destroy data belonging to other organizations.Recommendations
Update ToolJet to version 3.16.208 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾