Browse all 91 CVE security advisories affecting budibase. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Budibase serves as a low-code platform enabling rapid development of internal tools and business applications. Historically, the platform has been susceptible to multiple critical vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws, contributing to its 18 recorded CVEs. Security researchers have identified authentication bypasses and insecure default configurations as recurring issues. While no major public security incidents have been widely documented, the significant CVE count suggests potential risks for organizations implementing Budibase without rigorous hardening. Users should prioritize applying security patches and implementing additional safeguards when deploying this platform for business-critical applications.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-25045 | Budibase Critical Privilege Escalation & IDOR via Missing RBAC on User Role Management (Creator-Role) — budibase CWE-862 | 8.8AI | High AI | 2026-03-09 |
| CVE-2026-25737 | Budibase Arbitrary File Upload Leading to Multiple Critical Vulnerabilities (SSRF, Stored XSS) — budibase CWE-602 | 8.9 | High | 2026-03-09 |
| CVE-2026-25041 | Budibase has a Command Injection in PostgreSQL Dump Command — budibase CWE-78 | 9.8AI | Critical AI | 2026-03-09 |
| CVE-2026-27702 | Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) — budibase CWE-20 | 9.9 | Critical | 2026-02-25 |
| CVE-2026-25040 | Budibase Vulnerable to Privilege Escalation via API Abuse – Creator Can Invite Users with Admin/Any Role — budibase CWE-863 | 8.8AI | High AI | 2026-01-29 |
| CVE-2023-29010 | BudiBase Server-Side Request Forgery vulnerability — budibase CWE-918 | 6.5 | Medium | 2023-04-06 |
This page lists every published CVE security advisory associated with budibase. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.