# CVE-2026-19754: Baserow SQL injection in index() formula function

Source: https://junglewise.ai/threats/cve-2026-19754-baserow-sql-injection-in-index-formula-function  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-02. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-19754 · Severity: info · Published 2026-09-02

Baserow is an open-source no-code database platform. A low-privileged user who can create or modify formula fields can inject arbitrary SQL code through an undocumented parameter in the index() function. When Baserow recalculates formulas, the injected SQL executes with database-level privileges, potentially allowing unauthorized data access or modification.

Technologies: [Baserow](https://junglewise.ai/threats/technologies/baserow). Vendors: [Baserow](https://junglewise.ai/threats/vendors/baserow).

## Quick answers

**Is CVE-2026-19754 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-19754 being exploited in the wild.

**How severe is CVE-2026-19754?** Informational severity, published 2 September 2026.

**Which products and versions are affected?** Baserow 2.3.3.

**Is there a fix for CVE-2026-19754?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-19754 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-19754?** Check whether you run Baserow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a SQL injection flaw in Baserow's formula field processing, specifically in the index() function which extracts values from JSONB arrays. An authenticated attacker can supply an undocumented fourth argument that is interpolated directly into a PostgreSQL expression without sanitization. The injected SQL is executed during formula recalculation and runs with the privileges of the Baserow PostgreSQL database role rather than the application user's permissions, allowing privilege escalation. The attack requires authentication and the ability to create or modify formula fields, but does not require direct database access.

## Affected products

- Baserow Baserow 2.3.3

## Timeline

- 2026-09-02: disclosed

## References

- [https://fluidattacks.com/es/advisories/superestrella](https://fluidattacks.com/es/advisories/superestrella)
- [https://github.com/baserow/baserow](https://github.com/baserow/baserow)

## Related threats

- [Baserow missing authorization in unique_row_values endpoint](https://junglewise.ai/threats/cve-2026-113359-baserow-before-2-3-0-contains-a-missing-authorization)
- [Baserow Application Builder permission bypass in data source dispatch](https://junglewise.ai/threats/cve-2026-81335-baserow-application-builder-permission-bypass-in-data-source)
- [Baserow stored XSS via unescaped user display name in mentions](https://junglewise.ai/threats/cve-2026-76837-baserow-stored-xss-via-unescaped-user-display-name-in-mentions)
- [Baserow improper authorization in impersonate endpoint](https://junglewise.ai/threats/cve-2026-18817-baserow-improper-authorization-in-impersonate-endpoint)
- [Baserow 2FA Verify Endpoint improper authentication](https://junglewise.ai/threats/cve-2026-18816-baserow-2fa-verify-endpoint-improper-authentication)