{"schema_version":1,"title":"ToolJet vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in ToolJet: 0 in the last 7 days and 8 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-82875, was published on 31 August 2026.","url":"https://junglewise.ai/threats/technologies/tooljet","json_url":"https://junglewise.ai/threats/technologies/tooljet.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/tooljet","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":12,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":8,"last_365_days":11},"latest":[{"cve":"CVE-2026-82875","cvss":5.5,"epss":0.0022,"slug":"cve-2026-82875-tooljet-authorization-bypass-in-tooljetdb-controller","title":"ToolJet authorization bypass in TooljetDB controller","severity":"medium","exploited":false,"published_at":"2026-08-31T09:17:08.61+00:00","url":"https://junglewise.ai/threats/cve-2026-82875-tooljet-authorization-bypass-in-tooljetdb-controller"},{"cve":"CVE-2026-82874","cvss":9.9,"epss":0.0044,"slug":"cve-2026-82874-tooljet-cross-tenant-authorization-bypass-in-tooljet-db-endpoints","title":"ToolJet cross-tenant authorization bypass in tooljet-db endpoints","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:08.453+00:00","url":"https://junglewise.ai/threats/cve-2026-82874-tooljet-cross-tenant-authorization-bypass-in-tooljet-db-endpoints"},{"cve":"CVE-2026-82873","cvss":5,"epss":0.0031,"slug":"cve-2026-82873-tooljet-authorization-bypass-in-resources-export-endpoint","title":"ToolJet authorization bypass in resources export endpoint","severity":"medium","exploited":false,"published_at":"2026-08-31T09:17:08.31+00:00","url":"https://junglewise.ai/threats/cve-2026-82873-tooljet-authorization-bypass-in-resources-export-endpoint"},{"cve":"CVE-2026-82872","cvss":9.1,"epss":0.0051,"slug":"cve-2026-82872-tooljet-authorization-bypass-in-database-table-operations","title":"ToolJet authorization bypass in database table operations","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:08.16+00:00","url":"https://junglewise.ai/threats/cve-2026-82872-tooljet-authorization-bypass-in-database-table-operations"},{"cve":"CVE-2026-82871","cvss":7.7,"epss":0.0041,"slug":"cve-2026-82871-tooljet-authorization-bypass-in-database-read-routes","title":"ToolJet authorization bypass in database read routes","severity":"high","exploited":false,"published_at":"2026-08-31T09:17:08.017+00:00","url":"https://junglewise.ai/threats/cve-2026-82871-tooljet-authorization-bypass-in-database-read-routes"},{"cve":"CVE-2026-82870","cvss":9.6,"epss":0.0043,"slug":"cve-2026-82870-tooljet-authorization-bypass-in-database-write-routes","title":"ToolJet authorization bypass in database write routes","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:07.863+00:00","url":"https://junglewise.ai/threats/cve-2026-82870-tooljet-authorization-bypass-in-database-write-routes"},{"cve":"CVE-2026-73068","cvss":5.9,"epss":0.0027,"slug":"cve-2026-73068-tooljet-database-cross-tenant-authorization-bypass","title":"ToolJet Database cross-tenant authorization bypass","severity":"medium","exploited":false,"published_at":"2026-08-11T16:17:37.947+00:00","url":"https://junglewise.ai/threats/cve-2026-73068-tooljet-database-cross-tenant-authorization-bypass"},{"cve":"CVE-2026-54344","cvss":4.7,"slug":"cve-2026-54344-tooljet-os-command-injection-in-github-actions-deployment","title":"ToolJet OS command injection in GitHub Actions deployment workflow","severity":"medium","exploited":false,"published_at":"2026-07-08T16:16:30.76+00:00","url":"https://junglewise.ai/threats/cve-2026-54344-tooljet-os-command-injection-in-github-actions-deployment"},{"cve":"CVE-2026-55413","cvss":9.9,"slug":"cve-2026-55413-tooljet-marketplace-plugin-poisoning-enables-instance-wide-rce","title":"ToolJet marketplace plugin poisoning enables instance-wide RCE","severity":"info","exploited":false,"published_at":"2026-06-25T17:16:42.2+00:00","url":"https://junglewise.ai/threats/cve-2026-55413-tooljet-marketplace-plugin-poisoning-enables-instance-wide-rce"},{"cve":"CVE-2026-55412","cvss":8.3,"slug":"cve-2026-55412-tooljet-ssrf-in-restapi-data-source-via-private-ip-filter-bypass","title":"ToolJet SSRF in RestAPI data source via private IP filter bypass","severity":"high","exploited":false,"published_at":"2026-06-25T17:16:42.02+00:00","url":"https://junglewise.ai/threats/cve-2026-55412-tooljet-ssrf-in-restapi-data-source-via-private-ip-filter-bypass"},{"cve":"CVE-2026-55411","cvss":6.8,"slug":"cve-2026-55411-tooljet-cross-tenant-idor-in-credential-decryption-endpoint","title":"ToolJet cross-tenant IDOR in credential decryption endpoint","severity":"medium","exploited":false,"published_at":"2026-06-25T17:16:41.823+00:00","url":"https://junglewise.ai/threats/cve-2026-55411-tooljet-cross-tenant-idor-in-credential-decryption-endpoint"},{"cve":"CVE-2022-4111","cvss":3.1,"epss":0.008,"slug":"cve-2022-4111-tooljet-denial-of-service-via-unbounded-user-avatar-file-size","title":"ToolJet Denial of Service via unbounded user avatar file size","severity":"low","exploited":false,"published_at":"2022-11-22T03:30:56+00:00","url":"https://junglewise.ai/threats/cve-2022-4111-tooljet-denial-of-service-via-unbounded-user-avatar-file-size"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":3,"exploited":0,"vulnerabilities":6},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"ToolJet","slug":"tooljet","vendor":{"name":"ToolJet","slug":"tooljet","url":"https://junglewise.ai/threats/vendors/tooljet"},"aliases":[],"category":"framework","homepage":"https://tooljet.com/","repo_url":"https://github.com/ToolJet/ToolJet","description":"ToolJet is an open-source low-code platform for building and deploying internal tools.","url":"https://junglewise.ai/threats/technologies/tooljet"},"most_severe":[{"cve":"CVE-2026-82874","cvss":9.9,"epss":0.0044,"slug":"cve-2026-82874-tooljet-cross-tenant-authorization-bypass-in-tooljet-db-endpoints","title":"ToolJet cross-tenant authorization bypass in tooljet-db endpoints","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:08.453+00:00","url":"https://junglewise.ai/threats/cve-2026-82874-tooljet-cross-tenant-authorization-bypass-in-tooljet-db-endpoints"},{"cve":"CVE-2026-82870","cvss":9.6,"epss":0.0043,"slug":"cve-2026-82870-tooljet-authorization-bypass-in-database-write-routes","title":"ToolJet authorization bypass in database write routes","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:07.863+00:00","url":"https://junglewise.ai/threats/cve-2026-82870-tooljet-authorization-bypass-in-database-write-routes"},{"cve":"CVE-2026-82872","cvss":9.1,"epss":0.0051,"slug":"cve-2026-82872-tooljet-authorization-bypass-in-database-table-operations","title":"ToolJet authorization bypass in database table operations","severity":"critical","exploited":false,"published_at":"2026-08-31T09:17:08.16+00:00","url":"https://junglewise.ai/threats/cve-2026-82872-tooljet-authorization-bypass-in-database-table-operations"},{"cve":"CVE-2026-55412","cvss":8.3,"slug":"cve-2026-55412-tooljet-ssrf-in-restapi-data-source-via-private-ip-filter-bypass","title":"ToolJet SSRF in RestAPI data source via private IP filter bypass","severity":"high","exploited":false,"published_at":"2026-06-25T17:16:42.02+00:00","url":"https://junglewise.ai/threats/cve-2026-55412-tooljet-ssrf-in-restapi-data-source-via-private-ip-filter-bypass"},{"cve":"CVE-2026-82871","cvss":7.7,"epss":0.0041,"slug":"cve-2026-82871-tooljet-authorization-bypass-in-database-read-routes","title":"ToolJet authorization bypass in database read routes","severity":"high","exploited":false,"published_at":"2026-08-31T09:17:08.017+00:00","url":"https://junglewise.ai/threats/cve-2026-82871-tooljet-authorization-bypass-in-database-read-routes"},{"cve":"CVE-2026-55411","cvss":6.8,"slug":"cve-2026-55411-tooljet-cross-tenant-idor-in-credential-decryption-endpoint","title":"ToolJet cross-tenant IDOR in credential decryption endpoint","severity":"medium","exploited":false,"published_at":"2026-06-25T17:16:41.823+00:00","url":"https://junglewise.ai/threats/cve-2026-55411-tooljet-cross-tenant-idor-in-credential-decryption-endpoint"},{"cve":"CVE-2026-73068","cvss":5.9,"epss":0.0027,"slug":"cve-2026-73068-tooljet-database-cross-tenant-authorization-bypass","title":"ToolJet Database cross-tenant authorization bypass","severity":"medium","exploited":false,"published_at":"2026-08-11T16:17:37.947+00:00","url":"https://junglewise.ai/threats/cve-2026-73068-tooljet-database-cross-tenant-authorization-bypass"},{"cve":"CVE-2026-82875","cvss":5.5,"epss":0.0022,"slug":"cve-2026-82875-tooljet-authorization-bypass-in-tooljetdb-controller","title":"ToolJet authorization bypass in TooljetDB controller","severity":"medium","exploited":false,"published_at":"2026-08-31T09:17:08.61+00:00","url":"https://junglewise.ai/threats/cve-2026-82875-tooljet-authorization-bypass-in-tooljetdb-controller"},{"cve":"CVE-2026-82873","cvss":5,"epss":0.0031,"slug":"cve-2026-82873-tooljet-authorization-bypass-in-resources-export-endpoint","title":"ToolJet authorization bypass in resources export endpoint","severity":"medium","exploited":false,"published_at":"2026-08-31T09:17:08.31+00:00","url":"https://junglewise.ai/threats/cve-2026-82873-tooljet-authorization-bypass-in-resources-export-endpoint"},{"cve":"CVE-2026-54344","cvss":4.7,"slug":"cve-2026-54344-tooljet-os-command-injection-in-github-actions-deployment","title":"ToolJet OS command injection in GitHub Actions deployment workflow","severity":"medium","exploited":false,"published_at":"2026-07-08T16:16:30.76+00:00","url":"https://junglewise.ai/threats/cve-2026-54344-tooljet-os-command-injection-in-github-actions-deployment"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}