MediumVulnerabilityLLM-specific
GHSA-hfhx-w8p8-4hc7: Budibase: SSRF via bare fetch() in uploadUrl during AI table generation
- Identifier
- GHSA-hfhx-w8p8-4hc7
- Published
- Record updated
- Affected
- @budibase/server <= 3.38.1
- Fixed in
- No fixed version was stated when the source was last read.
Summary
The uploadUrl() function in packages/server/src/utilities/fileUtils.ts calls a bare fetch(url) with no SSRF blacklist check. It runs during AI table generation when LLM-generated attachment column values are strings. A builder-level user can prompt the LLM to produce internal IP addresses or cloud metadata endpoints, such as 169.254.169.254, which the server then fetches. Affected versions are <= 3.39.0.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database
- MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online
- InfoInside an AI Attack Against a US RetailerSimilar attack · Dark Reading
- HighCVE-2026-67547: taOS remote code execution via skill-exec endpoint for non-admin usersSimilar attack · NVD/CVE Database
- MediumCVE-2026-65957: Helio dashboard CORS origin validation bypass via private-network prefix matchSimilar attack · NVD/CVE Database