GHSA-v7j5-vc4m-723w: Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

Summary

Budibase 3.37.2 exposes a public endpoint, GET /api/chat-links/:instance/:token/handoff, handled by handoffChatLinkSession in packages/server/src/api/controllers/ai/chatIdentityLinks.ts, with no authentication middleware and no CSRF protection. A link token created by an attacker from their own /link slash command embeds the attacker's externalUserId, and when an authenticated Budibase user visits the URL, the server permanently binds the attacker's Slack, Discord or MS Teams identity to that user's account without any consent prompt, returning only "Authentication succeeded." The issue is rated High, CVSS 3.1 7.3 (CWE-352, CWE-284), and the flaw is reported as introduced in this version.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
• InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
• InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog