CVE-2026-126290

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...

CVE-2026-126290

NocoDB versions before 2026.07.0 are vulnerable to an information disclosure vulnerability in base-integrations.service.ts. Authenticated base members can bypass ownership checks by omitting a specific query flag when requesting integrations. This allows an attacker to access another user's priva...

EUVD-2026-125231

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...

CVE-2026-126290 NocoDB before 2026.07.0 Private Integration Credential Exposure via Base Integration Read

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...