CVE-2026-126282

NocoDB versions 2026.04.0 before 2026.08.0 are susceptible to an improper privilege management vulnerability in org-users.service.ts. The root cause is that updating a user's legacy organization role incorrectly rewrites their default-workspace role . This flaw allows revoked users to silently re...