TO
Vendor
ToolJet
25
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118685 New | TO ToolJet ToolJet | 6.5 | Oct 28 | ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard |
| CVE-2026-82875 | TO ToolJet ToolJet | 5.5 | Aug 31 | ToolJet before v3.16.208 Authorization Bypass via organizationId |
| CVE-2026-82874 | TO ToolJet ToolJet | 9.9 | Aug 31 | ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db |
| CVE-2026-82873 | TO ToolJet ToolJet | 5.0 | Aug 31 | ToolJet through 3.0.0-ee-beta.2 Cross-workspace Schema Disclosure via Export |
| CVE-2026-82872 | TO ToolJet ToolJet | 9.1 | Aug 31 | ToolJet before v3.16.208 Cross-Workspace Authorization Bypass |
| CVE-2026-82871 | TO ToolJet ToolJet | 7.7 | Aug 31 | ToolJet before v3.16.208 Cross-Organization Data Read via Database Routes |
| CVE-2026-82870 | TO ToolJet ToolJet | 9.6 | Aug 31 | ToolJet before v3.16.208 Cross-Tenant Database Manipulation |
| CVE-2026-82869 | TO ToolJet ToolJet | 7.7 | Aug 31 | ToolJet Database before v3.16.44 Privilege Escalation via join_tables |
| CVE-2026-73068 | TO ToolJet ToolJet | 5.9 | Aug 11 | ToolJet: Cross-tenant Broken Access Control in ToolJet Database (tooljet-db): any authenticated user can read and write another organization's tables |
| CVE-2026-54344 | TO ToolJet ToolJet | 8.8 | Jul 8 | ToolJet GitHub Actions comment body shell injection exposes deployment secrets |
| CVE-2026-55411 | TO ToolJet ToolJet | 6.8 | Jun 25 | ToolJet: Cross-tenant credential decryption (IDOR) in POST /api/data-sources/decrypt — any authenticated user can decrypt any organization's data-source secrets |
| CVE-2026-55412 | TO ToolJet ToolJet | 8.3 | Jun 25 | ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise |
| CVE-2026-55413 | TO ToolJet ToolJet | 9.4 | Jun 25 | ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Execution |
| CVE-2022-27979 | TO Tooljet Tooljet | 5.4 | Apr 26 | A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body… |
| CVE-2022-27978 | TO Tooljet Tooljet | 7.5 | Apr 26 | Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request |
| CVE-2022-4111 | TO Tooljet Tooljet | 6.5 | Nov 22 | Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB |
| CVE-2022-3422 | TO tooljet/tooljet tooljet | 7.5 | Oct 7 | Improper Privilege Management in tooljet/tooljet |
| CVE-2022-3348 | TO Tooljet Tooljet | 4.9 | Sep 28 | Just like in the previous report, an attacker could steal the account of different users |
| CVE-2022-3019 | TO Tooljet Tooljet | 8.8 | Aug 29 | The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an… |
| CVE-2022-2631 | TO tooljet/tooljet tooljet | 8.8 | Aug 2 | Improper Access Control in tooljet/tooljet |
| CVE-2022-2037 | TO Tooljet Tooljet | 8.0 | Jun 9 | Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0 |
| CVE-2022-23068 | TO Tooljet Tooljet | 5.4 | May 18 | ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user… |
| CVE-2022-23067 | TO Tooljet Tooljet | 8.8 | May 18 | ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover |