Vulnerability Description
Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing arbitrary content to any path writable by the Budibase process.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/Budibase/budibase/security/advisories/GHSA-pxwc-66g3-5f27
- https://www.vulncheck.com/advisories/budibase-before-arbitrary-file-write-via-pa
- https://github.com/Budibase/budibase/security/advisories/GHSA-pxwc-66g3-5f27
FAQ
What is CVE-2026-72850?
CVE-2026-72850 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenam...
How severe is CVE-2026-72850?
CVE-2026-72850 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-72850?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.