HighVulnerability
GHSA-rpj4-7x2v-wjrf: Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation
- Identifiers
- CVE-2026-45548GHSA-rpj4-7x2v-wjrf
- Published
- Record updated
- Affected
- @budibase/server < 3.34.8
- Fixed in
- 3.34.8
- released March 25, 2026, 51 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
GHSA-rpj4-7x2v-wjrf (CWE-918) affects Budibase. The processUrlFile function in packages/server/src/automations/steps/ai/extract.ts calls fetch(fileUrl) directly, skipping the IP blacklist validation that other automation steps apply through fetchWithBlacklist. An authenticated builder user can therefore make the server request internal addresses such as 169.254.169.254, which may expose cloud metadata credentials and internal services.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
- MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
- HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
- InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek