Is CVE-2026-84485 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-84485 being exploited in the wild.

How severe is CVE-2026-84485?

High severity, with a CVSS score of 7.5, published 2 September 2026.

Which products and versions are affected?

APITable through 1.13.0-beta.1.

Is there a fix for CVE-2026-84485?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-84485 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-84485?

Check whether you run APITable at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-84485: APITable authentication bypass in organization search endpoint

CVE-2026-84485 · Severity: high · CVSS 7.5 · Published 2026-09-02

APITable, a low-code collaborative app platform, exposes an internal organization member search endpoint without requiring authentication. Attackers can retrieve complete member directories including names, email addresses, and team hierarchies from any workspace by using space identifiers from publicly shared content. This allows unauthorized reconnaissance and collection of sensitive organizational information.

Technologies: APITable. Vendors: APITable.

Quick answers

Is CVE-2026-84485 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-84485 being exploited in the wild.
How severe is CVE-2026-84485?: High severity, with a CVSS score of 7.5, published 2 September 2026.
Which products and versions are affected?: APITable through 1.13.0-beta.1.
Is there a fix for CVE-2026-84485?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-84485 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-84485?: Check whether you run APITable at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an authentication bypass in the `/internal/organization/loadOrSearch` endpoint within the InternalOrganizationController. The endpoint fails to enforce authentication checks before returning organization member details. Attackers can exploit this by supplying space identifiers (obtained from shared links or public templates) without valid credentials. No special privileges or user interaction are required; the endpoint is directly network-accessible. An attacker can enumerate all members across an organization, extracting names, emails, and team structures. The vulnerability affects APITable versions up to 1.13.0-beta.1 and requires a patch to add proper authentication validation.

Affected products

APITable APITable through 1.13.0-beta.1

Timeline

2026-09-02: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.