Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• critical

  Budibase REST Datasource Unauthenticated Credential Theft via Cross-Origin Query Path

  A design flaw in Budibase's REST connector lets any anonymous visitor redirect a published query to an attacker-controlled server, causing Budibase to forward the datasource's stored Bearer tokens…

• high

  Budibase Unauthenticated Tenant User Information Disclosure

  Budibase's worker service exposes a public, unauthenticated endpoint that returns sensitive user data (email, tenant ID, SSO ID) for any known user identifier, letting anyone enumerate accounts with…

• high

  @budibase/server NoSQL Injection via MongoDB Query Parameter Interpolation

  A flaw in how Budibase builds MongoDB queries lets any app user inject JSON operators into a query parameter, bypassing filters to read, modify, or delete arbitrary documents in the database.

• high

  Budibase MySQL DESCRIBE Backtick Injection via multipleStatements

  The Budibase MySQL connector lets a malicious table name break out of a DESCRIBE query and execute arbitrary SQL during routine schema discovery, because backticks in table names are never escaped…

• highCVE-2026-55502

  CVE-2026-55502: Cloudreve Admin.Read OAuth Token Can Overwrite OneDrive Storage Policy Credentials

  A Cloudreve OAuth token scoped only to read-only admin access can silently overwrite the OneDrive storage policy credentials, including the app secret and app ID, because the sign-in route is missing…

• highCVE-2026-59224

  CVE-2026-59224: open-webui Terminal Proxy Authentication Bypass via session_id Query Injection

  Any authenticated Open WebUI user can impersonate another user's identity toward the terminal backend by smuggling a crafted user_id into the WebSocket proxy URL through an unvalidated session_id…

• highCVE-2026-55404

  CVE-2026-55404: yt-dlp Shortcut File Injection Leading to Remote Code Execution

  When yt-dlp writes shortcut files with --write-link, attacker-controlled video metadata can inject shell commands into Linux .desktop files or point Windows .url files at remote executables, causing…

• highCVE-2026-59867

  CVE-2026-59867: Microsoft Kiota SSRF and Local File Inclusion via Unrestricted OpenAPI $ref Resolution

  Kiota's code generator fetched any URL or local file path found in an OpenAPI $ref without restriction, letting an attacker trigger outbound network requests from the build host and leak local file…

• criticalCVE-2026-59940

  CVE-2026-59940: seroval fromJSON() Promise Resolver Type Confusion

  A type confusion bug in seroval's JSON deserializer lets attacker-controlled input trick Promise control nodes into calling methods on arbitrary objects from the reference table, enabling unintended…

• high

  GitPython Argument Injection via Diffable.diff Enables Arbitrary File Overwrite

  GitPython's diff method passes user-controlled arguments directly to git with no safety checks, letting an attacker overwrite any file the process can reach by injecting a --output option.

• high

  GitPython: OS Command Injection via --template in clone_from

  GitPython's clone protection denylist forgets the --template option, so an attacker who controls clone arguments can silently drop an executable post-checkout hook into the new repo and run arbitrary…

• highCVE-2026-59216

  CVE-2026-59216: Open WebUI Cross-User Code Execution via Unvalidated Socket.IO session_id

  A logged-in user can hijack another user's browser session and run arbitrary code inside it, including as an administrator, by substituting the victim's Socket.IO session ID into a normal chat…