CVE-2026-103757— Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Quick assessment
Affected
Budibase budibase
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Budibase 3.41.0 及之前版本存在一个服务端请求伪造（SSRF）漏洞，该漏洞存在于 AI 表格生成功能中。原因是 文件中的 函数使用了原始的 ，而非经过安全过滤的 。 已认证的构建者（Builder）用户可以向 端点发送提示词，在附件列中嵌入一个内部 URL。服务器随后会发起对该内部 URL 的请求，并将响应内容（例如云元数据凭证）包含在一个预签名的对象存储 URL 中返回，从而导致敏感信息泄露。
Possible ATT&CK Techniques 1 AI
T1090 · Proxy
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103757
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Source: CVE Program / CVE List V5
Vulnerability Description
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables that places an internal URL in an attachment column, causing the server to fetch it and return a presigned object-storage URL containing the response, such as cloud metadata credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-103757
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103757
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103757 (2)
IV. Related Vulnerabilities
Same product: budibase
-
CVE-2026-54356
Budibase authenticated arbitrary S3 signed upload URL issuan -
CVE-2026-35219
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, S -
CVE-2026-73410
Budibase: SSRF via DNS rebinding in the REST datasource inte -
CVE-2026-64657
Budibase: Database Connector SQL Injections in PostgreSQL, M -
CVE-2026-73305
Budibase: Privilege escalation via public role assignment AP
Same vendor: Budibase
-
CVE-2026-100688
Budibase server before 3.45.0 Cross-Tenant Information Discl -
CVE-2026-100687
Budibase Server before 3.45.0 Credential Exposure via Extern -
CVE-2026-100686
Budibase before 3.45.0 Cross-Workspace Privilege Escalation -
CVE-2026-100685
Budibase before 3.45.0 Information Disclosure via Chat Links -
CVE-2026-100684
Budibase Server 3.41.0 before 3.45.0 Authentication Bypass v
Same weakness: CWE-918
-
CVE-2026-82044
UTMStack < 11.2.16 Server-Side Request Forgery via downloadP -
CVE-2026-82040
UTMStack < 11.2.16 SSRF via IdentityProviderService -
CVE-2026-103958
Server-side request forgery in the tool server and remote ag -
CVE-2026-103957
Server-side request forgery in the OAuth2 discovery handling -
CVE-2020-37278
Weaver e-Bridge Unauthenticated Arbitrary File Read via save
V. Comments for CVE-2026-103757
No comments yet