Executive brief
Budibase is a low-code platform used by businesses to build internal applications. A security flaw in its AI database configuration allows users with 'builder' permissions to trick the server into connecting to internal network addresses. This could allow an attacker to scan your private network or access sensitive cloud metadata, potentially leading to further unauthorized access to your cloud infrastructure.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the Budibase VectorDB configuration endpoint. The 'host' parameter is validated only as a non-empty string using Joi, failing to block internal IP ranges (RFC 1918), link-local addresses, or reserved hostnames. An authenticated attacker with 'builder' level privileges can provide arbitrary IP addresses or hostnames, causing the Budibase server to initiate outbound TCP connections. This can be used to probe internal network services or access cloud metadata services (e.g., 169.254.169.254) to retrieve sensitive credentials. The issue is fixed in version 3.35.3.
Affected products
- Budibase Budibase < 3.35.3
Timeline
- 2026-05-21: disclosed
- 2026-05-27: advisory: NVD publication date
- 2026-06-12: patched: GitHub Advisory reviewed and updated