Executive brief
Budibase is a low-code platform used to build business applications and internal tools. A security flaw in its AI automation features allows authorized users to bypass network restrictions and force the server to make requests to internal systems. This could lead to the exposure of sensitive cloud credentials, internal network scanning, or unauthorized access to private company data.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the 'AI Extract File' automation step of Budibase. The root cause is the 'processUrlFile' function in 'packages/server/src/automations/steps/ai/extract.ts' using the standard 'fetch' API instead of the 'fetchWithBlacklist' utility used by other modules. This omission allows an authenticated user with builder permissions to bypass IP blacklisting and target internal addresses, including loopback (127.0.0.1), private RFC1918 networks, and cloud metadata services (e.g., 169.254.169.254). Attackers can use this to exfiltrate cloud IAM credentials or scan internal ports. The issue is fixed in version 3.34.8 by implementing proper IP validation.
Affected products
- Budibase @budibase/server < 3.34.8
Timeline
- 2026-05-11: disclosed: Vulnerability reported to Budibase
- 2026-05-15: advisory: GitHub Advisory published
- 2026-05-27: other: NVD published CVE-2026-45548