CVE-2026-126290

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...

CVE-2026-126281

NocoDB versions prior to 2026.08.0 are vulnerable to a missing authorization vulnerability (CWE-862) within the integrations.service.ts component. Specifically, the copy-from branch of integration creation fails to verify the owner or private flag of a source integration before decrypting its cre...

EUVD-2026-125240

NocoDB before 2026.08.0 contains a missing authorization vulnerability in the copy-from branch of integration creation in integrations.service.ts that decrypts a source integration's connection credentials without checking its owner or private flag. Authenticated users with the Creator role can...

CVE-2026-126290

NocoDB versions before 2026.07.0 are vulnerable to an information disclosure vulnerability in base-integrations.service.ts. Authenticated base members can bypass ownership checks by omitting a specific query flag when requesting integrations. This allows an attacker to access another user's priva...

EUVD-2026-125231

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...

CVE-2026-126290 NocoDB before 2026.07.0 Private Integration Credential Exposure via Base Integration Read

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration...