CVE-2026-126275

NocoDB versions before 2026.09.0 are susceptible to an Insecure Direct Object Reference (IDOR) vulnerability within row comment operations. This flaw allows authenticated users to access row comments from unrelated bases by providing only the necessary model and row IDs . Specifically, attackers ...