tooljet — Vulnerabilities & Security Advisories 20

Tooljet is an open-source internal tooling platform enabling developers to build custom business applications with minimal coding. Historically, it has faced vulnerabilities including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, often stemming from improper input validation and access control flaws. While no major public security incidents have been widely reported, the platform's eight recorded CVEs highlight ongoing security challenges in its authentication mechanisms and component integrations. Organizations implementing Tooljet should prioritize regular patching and harden configurations against common web application threats, particularly those related to unsanitized user inputs and insufficient session management.