Vulnerability Description
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import endpoint to exfiltrate sensitive files including environment variables containing JWT secrets, API keys, and database credentials.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/Budibase/budibase/security/advisories/GHSA-8xr5-pggf-26jq
- https://www.vulncheck.com/advisories/budibase-before-3.45.0-arbitrary-local-file
- https://github.com/Budibase/budibase/security/advisories/GHSA-8xr5-pggf-26jq
FAQ
What is CVE-2026-100680?
CVE-2026-100680 is a vulnerability with a CVSS score of 8.1 (HIGH). Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers wit...
How severe is CVE-2026-100680?
CVE-2026-100680 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-100680?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.