{"data":{"id":"fb71327a-5213-4f8e-9e58-11d79e334a82","title":"GHSA-pvcr-8mvp-w8qr:  Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)","summary":"The Budibase AI chat-link handoff endpoints, GET and POST /api/chat-links/:instance/:token/handoff, are on a public route with no CSRF middleware. The confirmation token is rendered in plaintext into the confirmation page, and the POST binds an external chat identity to the victim's globalUserId. An attacker who induces a same-tenant victim to submit the confirmation POST can act as that user inside Budibase automations and agent operations.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-pvcr-8mvp-w8qr","publishedAt":"2026-07-24T21:42:51.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@budibase/server@<= 3.38.1"],"affectedPackageNames":["@budibase/server"],"affectedPackageRefs":["npm:@budibase/server"],"affectedVendors":[],"affectedVendorsRaw":["Budibase"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-pvcr-8mvp-w8qr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-07-24T21:42:51.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}