Executive brief
ToolJet is an open-source platform used by businesses to build internal applications and AI workflows. A security flaw in its data connection component allows users to bypass safety filters and force the server to make unauthorized requests to internal infrastructure. In cloud environments like Azure, this could allow an attacker to steal sensitive identity tokens, potentially leading to a full takeover of the underlying cloud cluster and its data.
Technical details
A Server-Side Request Forgery (SSRF) exists in ToolJet's RestAPI data source component due to improper validation of hostnames. The `ssrf-protection.ts` filter only checks the literal hostname string against a blocklist rather than validating the resolved IP address. An attacker can use DNS rebinding or services like 'nip.io' (e.g., 169.254.169.254.nip.io) to resolve to restricted internal addresses such as the Azure Instance Metadata Service (IMDS). This allows an authenticated user to retrieve sensitive Azure managed identity tokens, potentially compromising the AKS production cluster. The vulnerability is fixed in version 3.20.178-lts by implementing DNS resolution before filter validation.
Affected products
- ToolJet ToolJet < 3.20.178-lts
Timeline
- 2026-05-24: disclosed: Vulnerability discovered and reported to vendor
- 2026-06-12: advisory: GitHub Security Advisory published
- 2026-06-25: patched: CVE published and fix confirmed in 3.20.178-lts