CVE-2026-116120

A vulnerability exists in NocoDB versions up to 2026.07.0 within the PublicApiLimiterGuard component. Specifically, the function UserRefreshToken.deleteAllUserToken in the /auth/user/signup file can be manipulated to cause an allocation of resources (CWE-770, CWE-400). This remote attack is chara...