{"data":{"id":"97a98086-06ea-433e-9815-02e0ba38fc47","title":"GHSA-cv96-5348-p5p8: Budibase: Unvalidated VectorDB Host Parameter Enables SSRF","summary":"The VectorDB configuration endpoint in Budibase accepts a host parameter with no validation against internal IP ranges, reserved hostnames, or URL schemes, so any authenticated builder-level user can make the server open TCP connections to internal addresses or cloud metadata endpoints such as 169.254.169.254. Timing and error differences let an attacker enumerate internal services, and retrieved cloud metadata could enable privilege escalation or lateral movement.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cv96-5348-p5p8","publishedAt":"2026-06-12T18:27:45.000Z","cveId":"CVE-2026-48148","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@budibase/server@< 3.35.3 (fixed: 3.35.3)"],"affectedPackageNames":["@budibase/server"],"affectedPackageRefs":["npm:@budibase/server"],"affectedVendors":[],"affectedVendorsRaw":["Budibase VectorDB"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00226,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-cv96-5348-p5p8"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-12T18:27:45.000Z","fixReleasedAt":"2026-04-08T12:43:17.466Z","daysToFix":-65,"fixCheckedAt":"2026-10-29T21:34:40.095Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@budibase/server","fixedVersion":"3.35.3","matchedVersion":"3.35.3","fixReleasedAt":"2026-04-08T12:43:17.466Z","daysToFix":-65,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:39.948Z"}]}}