CVE-2026-126795

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-126795
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126795.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-126795
Aliases
  • GHSA-rrx6-r9rr-g396
Published
2026-11-12T02:15:29Z
Modified
2026-11-12T10:45:40Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
ToolJet Onboarding Signup Endpoint util.service.ts activateUserWithPassword missing authentication
Details

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.21.94-beta is sufficient to resolve this issue. This patch is called af8f17a745621ae418f1743440f63d315e8b8643. The affected component should be upgraded. The vendor was contacted early about this disclosure.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-287",
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126795.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "3.20.256-lts"
                        },
                        {
                            "last_affected": "3.20.256-lts"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/tooljet/tooljet

Affected ranges

Type
GIT
Repo
https://github.com/tooljet/tooljet
Events
Introduced
7f8ac7d54b0492819d64485eb7621d486b1115c3
Last Affected
7f8ac7d54b0492819d64485eb7621d486b1115c3
Fixed
af8f17a745621ae418f1743440f63d315e8b8643
Fixed
e2b5ac23a603c340e380ef0a97ce95f3057bf2be
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "3.21.93-beta"
                },
                {
                    "last_affected": "3.21.93-beta"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "af8f17a745621ae418f1743440f63d315e8b8643"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v3.21.94-beta",
            "range": [
                {
                    "fixed": "e2b5ac23a603c340e380ef0a97ce95f3057bf2be"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

3.*
3.21.93-beta
v3.*
v3.21.93-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126795.json"