CVE-2026-119759
TrailBase 0.28.2 < 0.35.10 IDOR via Record API File Column
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another user's or table's file id in a record they own to read the victim's file bytes through their own record, or trigger permanent deletion of the victim's file by deleting or nulling their own record, while also using a $like filter on the file column to brute-force recover stripped ids character by character.
| CWE | CWE-639 |
| Vendor | trailbaseio |
| Product | trailbase |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for trailbaseio trailbase
Be the first to know when new high vulnerabilities affecting trailbaseio trailbase are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
trailbaseio / trailbase
0.28.2 < 0.35.10
References
Credits
tinthid