CVE-2026-82875

5.1 mediumEPSS 0.2%

Medium (5.1). EPSS 0.2% chance of exploitation in the next 30 days.

ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without verifying it matches the authenticated user's workspace. Authenticated users can enumerate, create, rename, and delete TooljetDB tables in any other workspace by manipulating the organizationId parameter in requests.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2026-08-31
Modified: 2026-09-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/ToolJet/ToolJet/security/advisories/GHSA-cx42-x23w-vhvf
https://www.vulncheck.com/advisories/tooljet-before-3.16.208-authorization-bypass-via-organizationid
https://github.com/ToolJet/ToolJet/security/advisories/GHSA-cx42-x23w-vhvf

Check your stack JSON