CVE-2026-72855
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public addresses during validation but to loopback or private addresses during actual connection, allowing access to blocked internal HTTP services.
Risk Assessment
The risk is the potential to access internal network services that should be blocked, potentially leading to exposure of sensitive information or further attacks.
Recommendation
Upgrade Budibase to version 3.40.0 or later, which includes SSRF protections.
Original NVD description (English source)
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public addresses during validation but resolve to loopback or private addresses during actual connection, allowing access to blocked internal HTTP services.