https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T22:46:17.769525+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82870 fkie_cve-2026-82870 2026-10-03T22:46:17.772968+00:00

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving guards to permanently delete tables, insert arbitrary data, and modify schemas across tenant boundaries on shared instances.

 https://vulnerability.circl.lu/vuln/ghsa-9fvx-4ww2-hqm9 GHSA-9fvx-4ww2-hqm9 2026-10-03T22:46:17.773071+00:00

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving guards to permanently delete tables, insert arbitrary data, and modify schemas across tenant boundaries on shared instances.