CVE-2026-27702 Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe eval vulnerability in Budibase's view filtering implementation allows any authenticated user including free tier accounts to execute arbitrary JavaScript code on the server...

CVE-2026-27702

creationtimestamp| type| source ---|---|--- 2026-02-23 17:16:12+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-rvhr-26g4-p2r8 2026-02-25 17:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tv2tg52n 2026-02-25...