CVE-2026-82875

MEDIUM 5.5

ToolJet before v3.16.208 Authorization Bypass via organizationId

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without verifying it matches the authenticated user's workspace. Authenticated users can enumerate, create, rename, and delete TooljetDB tables in any other workspace by manipulating the organizationId parameter in requests.

CWE	CWE-863
Vendor	tooljet
Product	tooljet
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for tooljet tooljet

Be the first to know when new medium vulnerabilities affecting tooljet tooljet are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Affected Versions

ToolJet / ToolJet

0 < 3.16.208

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/ToolJet/ToolJet/security/advisories/GHSA-cx42-x23w-vhvf vulncheck.com: https://www.vulncheck.com/advisories/tooljet-before-3.16.208-authorization-bypass-via-organizationid

Credits

🔍 JohannesLks