CVE-2026-82874

ToolJet before v3.16.208 suffers from a cross-tenant authorization bypass in its tooljet-db endpoints. The vulnerability stems from a failure to validate that an authenticated user belongs to the organization specified in the organizationId path parameter. This allows any Builder-level user to re...